﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>BlogJava-寻道-随笔分类-DB&amp;SQL</title><link>http://www.blogjava.net/sitinspring/category/34722.html</link><description>探寻程序之道，软件之道，生存之道，生活之道及生命之道。
</description><language>zh-cn</language><lastBuildDate>Sun, 12 Oct 2008 03:41:13 GMT</lastBuildDate><pubDate>Sun, 12 Oct 2008 03:41:13 GMT</pubDate><ttl>60</ttl><item><title>SQL注入攻击及其防范浅谈</title><link>http://www.blogjava.net/sitinspring/archive/2008/10/11/233776.html</link><dc:creator>sitinspring</dc:creator><author>sitinspring</author><pubDate>Sat, 11 Oct 2008 11:52:00 GMT</pubDate><guid>http://www.blogjava.net/sitinspring/archive/2008/10/11/233776.html</guid><wfw:comment>http://www.blogjava.net/sitinspring/comments/233776.html</wfw:comment><comments>http://www.blogjava.net/sitinspring/archive/2008/10/11/233776.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.blogjava.net/sitinspring/comments/commentRss/233776.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/sitinspring/services/trackbacks/233776.html</trackback:ping><description><![CDATA[&nbsp;&nbsp;&nbsp;&nbsp; 摘要: SQL注入攻击的基本原理，是从客户端合法接口提交特殊的非法代码，让其注入到服务器端执行业务的SQL中去，进而改变SQL语句的原有逻辑和影响服务器端正常业务的处理。SQL注入攻击是Web应用中一个重要的安全问题，虽然Java具备较高的安全性，但如果开发人员不注意，也有可能留下安全隐患，本文将对此展开一些粗浅的探讨，欢迎批评指正。&nbsp;&nbsp;<a href='http://www.blogjava.net/sitinspring/archive/2008/10/11/233776.html'>阅读全文</a><img src ="http://www.blogjava.net/sitinspring/aggbug/233776.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/sitinspring/" target="_blank">sitinspring</a> 2008-10-11 19:52 <a href="http://www.blogjava.net/sitinspring/archive/2008/10/11/233776.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>数据库设计三范式应用实战</title><link>http://www.blogjava.net/sitinspring/archive/2008/09/19/229899.html</link><dc:creator>sitinspring</dc:creator><author>sitinspring</author><pubDate>Fri, 19 Sep 2008 03:42:00 GMT</pubDate><guid>http://www.blogjava.net/sitinspring/archive/2008/09/19/229899.html</guid><wfw:comment>http://www.blogjava.net/sitinspring/comments/229899.html</wfw:comment><comments>http://www.blogjava.net/sitinspring/archive/2008/09/19/229899.html#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://www.blogjava.net/sitinspring/comments/commentRss/229899.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/sitinspring/services/trackbacks/229899.html</trackback:ping><description><![CDATA[&nbsp;&nbsp;&nbsp;&nbsp; 摘要: 一次将数据库设计三范式应用于表设计的实践过程，比较浅显。&nbsp;&nbsp;<a href='http://www.blogjava.net/sitinspring/archive/2008/09/19/229899.html'>阅读全文</a><img src ="http://www.blogjava.net/sitinspring/aggbug/229899.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/sitinspring/" target="_blank">sitinspring</a> 2008-09-19 11:42 <a href="http://www.blogjava.net/sitinspring/archive/2008/09/19/229899.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>