2006年1月15日
#
摘要: SQLServer存储过程的分页方案比拼SQLServer存储过程的分页,这个问题已经讨论过几年了,很多朋友在问我,所以在此发表一下我的观点建立表:CREATETABLE[TestTable]([ID][int]IDENTITY(1,1)NOTNULL,[FirstName][nvarchar](100)COLLATEChinese_PRC_CI_ASNULL,[LastName][nvarcha...
阅读全文
2006年1月14日
#
哇哈哈 收到了MSN 8.0版本的beta邀请函 下载体验了一下 帅啊。。。

--------------------------------------
Hello!
We'd like you to be among the first to try the beta version of Windows LiveTM Messenger.
If you use MSN?Messenger now, we think you're really going to enjoy Windows Live Messenger. It's as fun and reliable as the Messenger you already know, and you won't lose your contact list or any other personal information when you try this new version. Check it out to experience new ways to connect to your friends via text, voice, video, and more.
Download now
And in case you were wondering about the name change, Windows Live Messenger is part of a new family of services from Microsoft?that includes Windows Live Mail (now a simpler, safer, faster mail), and Live.com (a new personalized homepage experience), to name just a few.
Thanks,
The Windows Live Messenger team
You are receiving this message from Microsoft because you are a preferred Microsoft customer. We value our relationship with you, however, if you would prefer to no longer receive future research e-mails from Microsoft please follow this link: http://privacy.msn.com/choice/default.asp
Once your request is received, we will take prompt action to ensure you do not receive future research e-mails from Microsoft. Keep in mind that opting out of Microsoft "special offer" or research e-mails does not affect any newsletters you may have requested nor restrict important customer communications concerning your Microsoft products. If you have questions about Microsoft privacy policies, please read our privacy statement at: http://privacy.msn.com/.
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 ?2005 Microsoft Corporation. All Rights Reserved.
-------------------
来张贴图:
-------------------
界面比较Vista,可以更换背景色 还有QQ共享文件夹的功能 新一代的msn 感觉不错 哈哈。
PS: Beta版本要邀请函激活才能登陆你的id号 听说过两天我就能邀请别人体验,给别人发邀请函了
谁要的可以留言给我。。
过把时髦隐 :-)
2006年1月10日
#
无疑,Procedure是一重大课题 。。
对于自定义Procedure,之前没有操作SQL-Server的经验 ,但是写Procedure却是比较熟手的,也是拜高老师所赐吧..
下面是一个之前程序用过的prodecure, 里面包括传入、传出的参数设置。


/**//****** Object: Stored Procedure dbo.pro_CheckAdminLogin Script Date: 2004-6-4 16:37:25 ******/
CREATE PROCEDURE pro_CheckAdminLogin
(
@username nvarchar(20),
@password char(32),
@lastloginip char(15),
@output int output
)
AS

if exists(Select id from admin where username=@username and password=@password)
begin
update admin set lastLoginIP=@lastloginip,lastlogintime=getdate() where username=@username
set @output=0 --验证通过
end
else
begin
set @output=-1 --帐号密码不正确
end

GO
-----------
//
//Alter

Alter procedure Pro_procedureName
as
[SQL statements]

//Drop
Drop procedure pro_ProcedureName通过阅读,了解到MS-SQLserver 的procedure 是可以加密的
例
Create procedure P_XXX
with encryption
as
[SQL statements]
go

Procedure的好处:
系统有预编译 即编译1次,大大提高效益
某些业务规则可在procedure里面完成, 方便修改(不需改源前后台程序)
当然,还有我才知道的加密--安全性提高 Encryption
SQL-server还提供系统Procedure(sp_)和扩展Procedure(xp_)
利用系统存储过程新添用户的例子:
EXEC sp_addlogin 'LALA_ConnectName','PWD','DB_Name'
go
----
相对也明白了,具有SA权限后 利用扩展Procedure可以操作windows命令行解释器,
Use Master [<--Master数据库是 SQL-server存放系统procedure的数据库]
go
EXEC xp_cmdShell 'dir C:\*.exe'
这个XP_CmdShell就是在SQLserver系统执行命令行的方法
估计前段时间Hack最多的SQL injected,多半是成功注入后利用这里进行下一步权限探讨..
大概的 , Procedure掌握的就这些 需要反复练习 :)
2006年1月9日
#
PetShop 3.0 Database structure
1. MSpetshop
2. petshop oders
download 1.5 pdf
27/12/05 by Royman
DB structure of Net Tradding by Kane
27/12/05 by Royman
Muti-Tier application design
Presentation : like HTML / XML , CSS or JS for web
Business Tier : security (like SQL injured), business logic control , validation (like regular expressions) ...
Data Access Tier : supply some interfaces between BT and DB (like decide to use procedure or SQL connecting string in the programme,use ado.net code to reat/write DB, to control the BT table object or class, CRUD-- create,read,update,delete )
DB Tier : Manage the database, write the procedure in order to improve the performance.
by Royman 29/12/05
Cool!
288RMB = = D-Link DI-624+A 802.11b/g 2.4GHz Wifi Router
Of course need the password to access my apartment Wifi service!!!
2006年1月8日
#