【正文】 另外的一個(gè)帳戶(hù)應(yīng)該作為插入物或更新，而且也許甚至一個(gè)第三帳戶(hù)會(huì)是使用過(guò)的因?yàn)閯澇?。 數(shù)據(jù)庫(kù)來(lái)源 請(qǐng)求類(lèi)型 數(shù)據(jù)庫(kù) 使用者身份證 密碼 任何的連接在連接之前，客戶(hù)要連接到什么類(lèi)型的伺候器 。 這個(gè)短 SQL 指令回到客戶(hù)文件和文件夾的目錄在 SQL 伺候器的 c:\directory 之下 ， 注意這個(gè)例子使用一個(gè)廣大的儲(chǔ)存對(duì) MS SQL 伺候器是獨(dú)家的程序 。 首先，數(shù)據(jù)庫(kù)申請(qǐng)使用都使用相同的 SQL 的語(yǔ)言 ， 或結(jié)構(gòu)查詢(xún)語(yǔ)言 。 雖然大多數(shù)的使用者現(xiàn)在知道黑客，但是他們?nèi)匀徊涣私馑麄兊臄?shù)據(jù)庫(kù)伺候器是多么的易受影響黑客的攻擊 。 在工程界也有許多分布式數(shù)據(jù)庫(kù)的例子，如 SUN 公司的網(wǎng)絡(luò)文件系統(tǒng)（ NFS）被應(yīng)用到計(jì)算機(jī)輔助工程應(yīng)用程序中，將數(shù)據(jù)分散到由 SUN 工作站組成的網(wǎng)絡(luò)上 的不同硬盤(pán)之間。當(dāng)申請(qǐng)的資源是數(shù)據(jù)庫(kù)中的數(shù)據(jù)時(shí)，客戶(hù)機(jī) /服務(wù)器模型則為分布式數(shù)據(jù)庫(kù)提供了框架結(jié)構(gòu)。注意，一旦用戶(hù)和數(shù)據(jù)分開(kāi)，通信和網(wǎng)絡(luò)則開(kāi)始扮演重要 角色。例如開(kāi)發(fā)一個(gè)退休金程序，需要訪問(wèn)雇員數(shù)據(jù)，這一數(shù)據(jù)同時(shí)也被工資單程序訪問(wèn)。它是非過(guò)程化語(yǔ)言或者說(shuō)是描述性的，用戶(hù)只須指定一種類(lèi)似于英語(yǔ)的描述，用來(lái)確定操作，記錄或描述記錄組合。 在分層方法中，當(dāng)數(shù)據(jù)庫(kù)建立時(shí)，每一關(guān)系即被明確地定義。 ，他們利用數(shù)據(jù)庫(kù)系統(tǒng)領(lǐng)先于競(jìng)爭(zhēng)對(duì)手。 DBMS 可組織，處理和表示從數(shù)據(jù)庫(kù)中選出的數(shù)據(jù)元。 數(shù)據(jù)庫(kù)由一個(gè)或一套文件組成，其中的信息可以分解為記錄，每一記錄又包含一個(gè)或多個(gè)字段（或稱(chēng)為域）。s heart to suffer a fatal arrest. Ironically, although most users are now aware of hackers, they still do not realize how susceptible their database servers are to hack attacks. Thus, this article presents a description of the primary methods of attacking database servers (also known as SQL servers) and shows you how to protect yourself from these attacks. You should note this information is not new. Many technical white papers go into great detail about how to perform SQL attacks, and numerous vulnerabilities have been posted to security lists that describe exactly how certain database applications can be exploited. This article was written for the curious nonSQL experts who do not care to know the details, and as a review to those who do use SQL regularly. What Is a SQL Server? A database application is a program that provides clients with access to data. There are many variations of this type of application, ranging from the expensive enterpriselevel Microsoft SQL Server to the free and open source mySQL. Regardless of the flavor, most database server applications have several things in mon. First, database applications use the same general programming language known as SQL, or Structured Query Language. This language, also known as a fourthlevel language due to its simplistic syntax, is at the core of how a client municates its requests to the server. Using SQL in its simplest form, a programmer can select, add, update, and delete information in a database. However, SQL can also be used to create and design entire databases, perform various functions on the returned information, and even execute other programs. To illustrate how SQL can be used, the following is an example of a simple standard SQL query and a more powerful SQL query: Simple: Select * from This returns all information in the table tblChair from the database dbFurniture. 揚(yáng)州大學(xué)計(jì)算機(jī)專(zhuān)業(yè) 畢業(yè)設(shè)計(jì) (外文翻譯 ) 6 Complex: EXEC master..xp_cmdshell 39。(3)and an interface between the DBMS and its users. Several major trends are emerging that enhance the value and usefulness of database management systems。s request will be handled by the server. Next es the database name and finally the authentication information. All the connection information is important, but by far the weakest link is the authentication information—or lack thereof. In a properly managed server, each database has its own users with specifically designated permissions that control what type of activity they can perform. For example, a user account would be set up as read only for applications that need to only access information. Another account should be used for inserts or updates, and maybe even a third account would be used for deletes. This type of account control ensures that any promised account is limited in functionality. Unfortunately, many database programs are set up with null or easy passwords, which leads to successful hack attacks. 揚(yáng)州大學(xué)計(jì)算機(jī)專(zhuān)業(yè) 畢業(yè)設(shè)計(jì) (外文翻譯 ) 7 譯文 數(shù)據(jù)庫(kù)管理系統(tǒng)介紹 數(shù)據(jù)庫(kù)（ database,有時(shí)拼作 data base）又稱(chēng)為電子數(shù)據(jù)庫(kù)，是專(zhuān)門(mén)組織起來(lái)的一組數(shù)據(jù)或信息，其目的是為了便于計(jì)算機(jī)快速查詢(xún)及檢索。處理與創(chuàng)建，訪問(wèn)以及維護(hù)數(shù)據(jù)庫(kù)記錄有關(guān)的復(fù)雜任務(wù)的系統(tǒng)軟件包叫做數(shù)據(jù)庫(kù)管理系統(tǒng)（ DBMS）。在提高數(shù)據(jù)庫(kù)管理系統(tǒng)的價(jià)值和有效性方面正在展現(xiàn)以下一些重要發(fā)展趨勢(shì)； 要最新的信息以做出有效的決策。 分層模型的開(kāi)發(fā)是因?yàn)榉謱雨P(guān)系在商業(yè)應(yīng)用中普遍存在，眾所周知，一個(gè)組織結(jié)構(gòu)圖表就描述了一種分層關(guān)系：高層管理人員在最高層，中層管理人員在較低的層次，負(fù)責(zé)具體事務(wù)的雇員在最底層。每個(gè)記錄包含了專(zhuān)用項(xiàng)目的字段值。鏈接到其他一系列子記錄。它引起了人們的關(guān)注，因?yàn)檫x擇面向?qū)ο蟪绦蛟O(shè)計(jì)語(yǔ)言的開(kāi)發(fā)人員希望有一個(gè)基于在對(duì)象模型基礎(chǔ)上的數(shù)據(jù)庫(kù)。當(dāng)今的個(gè)人計(jì)算機(jī)，部門(mén)級(jí)計(jì)算機(jī)和分布式處理都需要計(jì)算機(jī)之間以及應(yīng)用程序之間在相等或?qū)Φ鹊幕A(chǔ)上相互通信，在數(shù)據(jù)庫(kù)中客戶(hù)機(jī) /服務(wù)器模型為分布式數(shù)據(jù)庫(kù)提供了框架結(jié)構(gòu)。然而，一個(gè)重要的缺點(diǎn)是每個(gè)讀寫(xiě)請(qǐng)求需要在網(wǎng)絡(luò)上傳播，在刷新文件時(shí)可能出現(xiàn)問(wèn)題。 這一個(gè)軟件的模塊控制整個(gè)組織的順利運(yùn)行就如同人身體動(dòng)脈使得鮮血在身體中流通順暢 。 一個(gè) SQL 伺候器是做什么的 ？ 一個(gè)數(shù)據(jù)庫(kù)身份驗(yàn)證是一個(gè)提供給有權(quán)限客戶(hù)訪問(wèn)數(shù)據(jù)通道 。 xp_cmdshell39。 如果你想要學(xué)習(xí)更多有關(guān)他們 ， 一些 Google39。 在適當(dāng)?shù)靥幚砹怂藕蚱?。 Modern Database Management 7 th Edition Jeffrey A. Hoffer, Mary B. Prescott, Fred R. McFadden