MSSQL网页编程之SQL Server加过密的存储历程能够被解密...
有了数据以后,我们就要想一个比较统一的方法来闪回。上面我们说了对于DML操作,可以通过反向执行所有逆操作来实现,对于语句里面的DDL,只能直接跳过。原因是一个DDL不一定有直接的逆操作。server|存储历程|解密1.Protectingthestoredprocedureandmakingittotallynon-decryptableistechnicallyimpossible.TherehastobeawaytoreverseitsothatSQLServercangeneratetheexecutionplanandexecutethequery.
2.TheEncryptionthatSQLServerisofferingisobfuscationofstoredproceduresthroughafeaturecalledstoredprocedureencryption.Obfuscationallowsthestoredprocedurestobeusedbydatabaseend-userswhilemakingitmoredifficultforthoseenduserstovieworchangethecontentsofthestoredprocedures.Inordertoexecutethestoredprocedures,SQLServermusthaveaccesstotheoriginalsourceformofthestoredprocedures.Asaresult,adeterminedSQLServersystemadministratorcouldobtainaccesstothesourceformofthestoredprocedures(althoughnon-systemadministratorsdonothavethisability).BecausetheobfuscationfeatureisnotintendedtoprotectthesourceformofstoredproceduresfrombeingcopiedorviewedbyadeterminedSQLServeradministrator,oneshouldnotrelysolelyonthefeatureforthatpurpose.
3.Obfuscationofstoredprocedureissimilartowhatotherdatabasevendorsoffer.Itistruethatthereexistsutilitiestodecryptproceduresprotectedbyobfuscation,andthisissimilartherealsoexistsdecompilesforJavaaswell.Thepointis,ifonecanrunthecodeandgetaccesstoanexecutableform,itsalwaystechnicallypossibletoreverseengineerthecode.
4.AnalternativeyoumaywanttotryistouseextendedstoredproceduresandDLL.BycreatingaDLLversionofthecode,makesithardertobreakbutitisstillpossibletoreverse-engineeraDLL.
5.Theprotectionthatisavailableforallsoftwaredevelopmentfirminterestedinprotectingtheirassetaresameacrossalldataproducts:
a.Obfuscation.
b.LegalProtection(Copywrite,patents,etc).
ItisnotpossibletodependonlyuponeitheroneofthesetwocorepillarsofIntellectualPropertyprotection.
限制,如果WHERE子句的查询条件里有不等号(WHEREcoloum!=),MySQL将无法使用索引。类似地,如果WHERE子句的查询条件里使用了函数(WHEREDAY(column)=),MySQL也将无法使用索引。 这就引发了对varchar和char效率讨论的老问题。到底如何分配varchar的数据,是否会出现大规模的碎片? 然后最好有实践机会,能够把实践到的和实践结合起来,其实理论思考是个非常困扰和痛苦的事情 原来公司用过MYSQL自己也只是建个表写个SQL 所以你总能得到相应的升级版本,来满足你的需求。 我们学到了什么?思考问题的时候从表的角度来思考问 语句级快照和事务级快照终于为SQLServer的并发性能带来了突破。个人感觉语句级快照大家应该应用。事务级快照,如果是高并发系统还要慎用。如果一个用户总是被提示修改不成功要求重试时,会杀人的! 一个是把SQL语句写到客户端,可以使用DataSet进行加工;
页:
[1]