SQL Injection Prevention Cheat Sheet
This article provides a set of simple techniques for preventing SQL Injection vulnerabilities. These techniques can be used with practically any kind of programming language with any type of database. There are other types of databases, like XML databases, which can have similar problems (e.g., XPath and XQuery injection) and these techniques can be used to protect them as well.More…
What really happens when you navigate to a URL
As a software developer, you certainly have a high-level picture of how web apps work and what kinds of technologies are involved: the browser, HTTP, HTML, web server, request handlers, and so on.
In this article, we will take a deeper look at the sequence of events that take place when you visit a URL. More…
Following a Few of Quality Will Give You The Quantity You Need
Great advice from Mitch Joel: Too many people are looking for too many ways to follow too many people and places. Your best bet is to do the opposite. Don't add more noise to your life. start removing the noise. It's not important to follow every Blog, and it's impossible to listen to every Podcast. If you've spent more than five minutes on Twitter, the river of tweets and the speed with which they flow makes every conversation look, feel and last a couple of seconds (at most). Become a better filter. If you're following someone and they're really not adding any value to your life (your growth, development and education), drop them. If you follow a Blog but never get to it because life happens, drop it. If you're a publisher of content (text, audio, video, images, whatever…) think about what you're publishing (noise vs. value).. More…
Daily Roundup of News, Tips and Tricks for 2010-02-10
-
The new YQL set of tables for Twitter enables any developer to use simple SQL-like queries to retrieve and post Twitter data. For simple user queries, getting a user’s twitter profile data is as simple as something like “SELECT * FROM twitter.status WHERE id=’8036408424?;“.
-
A VARCHAR2(0) column?
-
We should stop using NVL altogether and get into the habit of using coalesce instead – regardless how how annoying it is to type.
-
Interview with Sue Harper, Senior Principal Product Manager for Database Development Tools at Oracle. She has been at Oracle since 1992 and is currently based in London. Sue is a regular contributor to magazines, maintains a technical blog, and speaks at many conferences around the world.
-
There are a growing number of people asking the question: how do you move a VMware virtual machine to VirtualBox. So it is about time the Fat Bloke rolled up his sleeves and showed us how.
-
When Oracle acquired Sun, the database giant also acquired the Java technology that was Sun's lifeblood. Oracle Chairman and CEO Larry Ellison called Java the most important technology Oracle has ever acquired. With ownership and leadership come responsibility. Java's future is now in Oracle's hands. This eWEEK slide show presents 15 ways Oracle can improve Java and boost its position in the Java community.
15 Ways Oracle Can Make Java Better (and Improve Its Stance with Developers)
When Oracle acquired Sun, the database giant also acquired the Java technology that was Sun’s lifeblood. Oracle Chairman and CEO Larry Ellison called Java the most important technology Oracle has ever acquired. With ownership and leadership come responsibility. Java’s future is now in Oracle’s hands. This eWEEK slide show presents 15 ways Oracle can improve Java and boost its position in the Java community. More…
Migrating from VMware to VirtualBox: Oracle Enterprise Linux
There are a growing number of people asking the question: how do you move a VMware virtual machine to VirtualBox. So it is about time the Fat Bloke rolled up his sleeves and showed us how.More…
Yahoo Launches SQL Interface to Twitter
The new YQL set of tables for Twitter enables any developer to use simple SQL-like queries to retrieve and post Twitter data. For simple user queries, getting a user’s twitter profile data is as simple as something like “SELECT * FROM twitter.status WHERE id=’8036408424?;“.More…
Daily Roundup of News, Tips and Tricks for 2010-02-09
-
A list of Oracle Strategic acquisitions by category.
-
Documentation of Oracle wait groups and their wait events.
-
Oracle is preparing a public-relations onslaught, intended to change the perception of Oracle as cloud critic.
-
Oracle has agreed to acquire AmberPoint, a leader in Service-Oriented Architecture (SOA) Management.
-
This Security Alert addresses security issue CVE-2010-0073, a vulnerability in the Node Manager component of Oracle WebLogic Server. This vulnerability may be remotely exploitable without authentication, i.e. it may be exploited over a network without the need for a username and password. A knowledgeable and malicious remote user can exploit this vulnerability which can result in impacting the availability, integrity and confidentiality of the targeted system.
-
Can you trust the leading open-source database engines, PostgreSQL and MySQL, to deliver the performance and features that the Oracles, SQL Servers, and DB2s of the world do? Not just yet, but they could offer enough to meet your needs. Find out how they stack up against each other, as well as against the commercial alternatives.
PostgreSQL vs. MySQL vs. Commercial Databases: It’s All About What You Need
Can you trust the leading open-source database engines, PostgreSQL and MySQL, to deliver the performance and features that the Oracles, SQL Servers, and DB2s of the world do? Not just yet, but they could offer enough to meet your needs. Find out how they stack up against each other, as well as against the commercial alternatives.More…
Oracle Security Alert for CVE-2010-0073 – WebLogic Server
This Security Alert addresses security issue CVE-2010-0073, a vulnerability in the Node Manager component of Oracle WebLogic Server. This vulnerability may be remotely exploitable without authentication, i.e. it may be exploited over a network without the need for a username and password. A knowledgeable and malicious remote user can exploit this vulnerability which can result in impacting the availability, integrity and confidentiality of the targeted system.More…
