SQL Server 2016ã¯ãªã³ãã¬ãã¹ã¨ã¯ã©ã¦ãã«ã¾ããã£ããã¼ã¿ãã¼ã¹ãå®ç¾ãå¤ããã¼ã¿ã¯ã¯ã©ã¦ãå´ã§ä¿æãåææ©è½ã¯Rãçµ±åãIginte 2015 ãã¤ã¯ãã½ããã¯ä»é±è¡ãããã¤ãã³ããIgnite 2016ãã§ãSQL Serverã®æ¬¡ãã¼ã¸ã§ã³ã¨ãªãSQL Server 2016ã®æ°æ©è½ãçºè¡¨ããã¬ãã¥ã¼çãä»å¤ã«å ¬éããããã¨ãæããã«ãã¾ããã SQL Server 2016ã§ã¯ãããé«åº¦ãªããã·ã§ã³ã¯ãªãã£ã«ã«æ©è½ãRã¨ã®çµ±åãå«ãé«åº¦ãªåææ©è½ãã¯ã©ã¦ãã¨ã®çµ±åæ©è½ãæå·åæ©è½ã¨ã»ãã¥ãªãã£ã®æ¡å¼µãªã©ãè¡ãããã¨ã®ãã¨ã
SQLã¯ãã¼ã¿ãã¼ã¹ãããã¼ã¿ãæ½åºãããããããã®è¨èªã§ãã ãã®ææ¸ã¯ãErogameScapeã®ãã¼ã¿ãã¼ã¹ããSELECTã使ã£ã¦èªç±èªå¨ã«ãã¼ã¿ãåå¾ã§ããããã«ãªããã¨ãç®æ¨ã«ãã¾ãã ã¨ãã²ã¼ãããã¯ããã大å¦çãããã®ã¨ãã«ã大å¦ã®è¬ç¾©ã§ãã¼ã¿ãã¼ã¹ãå¦ãã§ãéå±ã ãªã¼ã¨æã£ãæã«ãErogameScapeã§SQLãå¦ã¶ãã¨ã§ãå°ãã§ãSQLã«èå³ãæã£ã¦ãèªèº«ã§ãã¼ã¿ãå å·¥ãããã¨ãå¦ç¿ãã¦é ããã¨å¹¸ãã§ãã â»ç§ã®å¤§å¦ã®ãªã¬ã¼ã·ã§ãã«ãã¼ã¿ãã¼ã¹ã®ææ¥ã§ã¯ãèªåã®èº«ã®åãã®ä½ããERå³ã«è½ã¨ãè¾¼ãã§ãDBãè¨è¨ããPostgreSQLã«å®è£ ããå®éã«ãã¼ã¿ãå ¥åãã¦SELECTãã¦ã¿ãã¨ããã¾ã§ãããã¾ããã ERå³ã¨ããæ¦å¿µãå¦ãã ã¨ãããããããã¯é¢ç½ããã¨æãã¾ããã å çã¯ããè¨ã£ãã®ã§ãã ãERå³ã«è½ã¨ãè¾¼ãã¨ãæãããããªãã£ããã¨ãåããããã¨ã 彿ã
April 4, 2013 Twitterã®éå»ãã°ãè½ã¨ããããã«ãªã£ãã®ã§ SQLã«å¦ã¶ã«ã¯ä¸åº¦ããããã¨ãããã¨ã§ ã«ã¸ã¥ã¢ã«ã«OSXä¸ã§homebrewã使ã£ã¦MySQLã«å ¥ãã¦ã¿ã¾ããã MySQL ver.5.6 (homebrew install) OS / OSX 10.8.3 ãªã«ã¯ã¨ãããã¢ã¼ã«ã¤ãããã¦ã³ãã¼ã Twitterã®å人è¨å®ã£ã½ãã¨ãããã ããããããã¨ãã¦ã³ãã¼ããªã³ã¯ãè²¼ãããã¡ã¼ã«ãéããã¦ããã®ã§ ãããããã¦tweets.zipããã¦ã³ãã¼ãã tweets.csvãæ¢ã tweets.zipãè§£åããã¨ãä¸èº«ããããªæãã«åºã¦ã㦠index.htmlããã©ã¦ã¶ã§éãã¨ãéå»ã®ãã¦ã£ã¼ããè¦ããããã¾ãã æéæ³¥æ£ãªã®ã§ãããããã¾ãã ããã¦ãtweets.csvãç®çã®ãã¡ã¤ã«ã§ãä¸èº«ãéã㨠"tweet_id","in_reply_t
社å ã§ãSQLã¤ã³ã¸ã§ã¯ã·ã§ã³ã«ã¤ãã¦ããããã¦åçã»ååããè°è«ããããã¨ãã風潮ãã«ããã«èµ·ãã£ãã®ã§ãã²ã¨ã¾ãã¯å©ãå°ã¨ãã¦åã®æ¹ã§ã¾ã¨ãã¦çã§è°è«ãã¾ãããã¨ããããã§ã以ä¸ã®ãããªè³æã使ããã 社å åå¼·ä¼ç¨ã®è³æãªã®ã ãã©ãåã¯å¥ã«ã»ãã¥ãªãã£ã«è©³ããããã§ããªãããã¾ãã¦ãPHPã®ãã¨ã¯ç´ 人ãªã®ã§ãå¤é¨ã®èè ã«ã¬ãã¥ã¼ãã¦ããã ãã¦ãã§ããã ãæ£ããç¥èã«åºã¥ãã¦è°è«ã§ããã°ã¨æããã¾ãã¹ã©ã¤ããå è¡å ¬éãããã¨ã«ãããããããã¨ãããTwitterä¸ã§å¤æ°ã®èè ããããããã¨ãææããã ãã¦ãå°ãã¨ã決å®çã«ããããªå 容ã«ã¯ãªã£ã¦ããªããã®ã«ãªã£ãããã ããããã¨ããããã¾ãã åãã®è·åã®ã²ã¨ã¤ã«ãã»ãã¥ãªãã£é¢é£ãã¨ãããã®ã謳ããã¦ããã®ã§ããã®ãããã®ç¥èæ®åã»åºç¤æ´åã«ã¤ãã¦ããä»äºã®ã²ã¨ã¤ã¨ãã¦è¡ã£ã¦ãããå ã«ãæ¸ããéããåèªèº«ããã®ç¹ã«ã¤ãã¦ããçè§£ã§ãã¦
ããã«ã¡ã¯ããã«ã¡ã¯ï¼ï¼ Webããã°ã©ãã³ã°ãã¦ã¾ããï¼ ãããPHPã¯ã»ãã¥ãªãã£ããã¡ãã¨ãè¨ããã¦ãããã ã§ãããã£ã¦ãã¹ã¤ã«PHPãæªãããããªãã¦ã ãã¶ããã»ãã¥ãªãã£ã¨ãããã¾ã ããããããªã人ãå¤ãã ããªããããªãããªã ããã°ã£ã¦åå¼·ãããã¨æã£ã¦ãããªãã ãé£ããçå±ã並ãã§ãããããããâ¦ã ãªã®ã§ä»æ¥ã¯ãã»ãã¥ãªãã£å¯¾çã«ã¤ãã¦ã ãããã ããã£ã¨ãã°ãããã¨å®å ¨ã«ãªãããã£ã¦ãã¨ããåå¿è ããã«ã大éæã«æ¸ãã¦ã¿ã¾ãï¼ çå±ãããããªãã¦ããæåã¯ã³ããã§ãã ãªã«ããããªãããããã£ãã»ãããã£ã¨ãã·ã«ãªãï¼ 1. XSS対ç åçãªãã®ã表示ããã¨ããå ¨é¨ã¨ã¹ã±ã¼ãããã°okã§ãï¼ (NG) ããªãã®åå㯠<?= $name ?> ã§ããï¼ â (OK) ããªãã®åå㯠<?= htmlspecialchars($name, ENT_QUOTES) ?>
ç§ãã¡ãæ®æ®µãæ¥æ¬ãã飿³ãããã®ã¯ä½ã§ãããããããããæ¡ã¨å¯å£«å±±ãè¶éã¨å¯¿å¸ãè¸è ã¨ä¾ã®ãããªãã®ã§ãããããããã®å½ã®æåã¯ãã£ã¨è±ãã§ã鳿¥½ãæ¼åãæ ç»æ®å½±ãç¾è¡ãããã¦ãã¡ããæå¦ããã®å½ã§çºå±ãã¦ããããä»ãçºå±ãç¶ãã¦ããã®ã§ãã ç§ãã¡ã®èªè ã®ä¸ã§ãç¾ä»£æ¥æ¬ã代表ããä½å®¶ã¨ããã°ãæä¸æ¥æ¨¹ã§ããããããããæä¸ä»¥å¤ã«ããä¸å³¶ç±ç´å¤«ãæ¡èå¤çãæä¸é¾ã忬ã°ãªãªãé´æ¨å å¸ãå·ç«¯åº·æãæ±æ¸å·ä¹±æ©ãªã©ãå¤ãã®æ¥æ¬äººä½å®¶ãä¸ççãªè©ä¾¡ãå¾ã¦ããã®ã§ããç¾ä»£æ¥æ¬ã®å°èª¬çã¸ã®è²¢ç®ã¯è¨ãç¥ããªããã®ãããããã®ä½åã¯èªè ã®å¿ãã¤ãã¿ãè¨æ¶ã«æ®ããªããã¨ã¯ãªãã ããã
ãã®ã¨ã³ããªã§ã¯ããããä¸ã§ãSQLã¤ã³ã¸ã§ã¯ã·ã§ã³å¯¾çãã§Googleæ¤ç´¢ããçµæã®ä¸ä½15ã¨ã³ããªãæ¤è¨¼ããçµæãå ±åãã¾ãã SQLã¤ã³ã¸ã§ã¯ã·ã§ã³èå¼±æ§ã®å¯¾çã¯ãæ¢ã«ãå®å ¨ãªSQLã®å¼ã³åºãæ¹ãã«ãã¡ã¤ãã«ã¢ã³ãµã¼ï¼å¾è¿°ï¼ã示ãã¦ãã¾ãããã¾ã ãã®ææ¸ãç¥ããªã人ãå¤ãã ãããã¨ã¨ãããä¸ç´è åãã®ææ¸ã§ãããã¨ãããã¾ã ååã«å®è·µããã¦ã¯ããªãã¨æãã¾ãã ãã®ç¶æ³ã§ãã»ãã¥ãªãã£ã®ãã¨ãããç¥ããªã人ãSQLã¤ã³ã¸ã§ã¯ã·ã§ã³å¯¾çãããã¨ããå ´åã®è¡åãäºæ¸¬ãã¦ã¿ãã¨ãããªãã®å²åã®äººãGoogleçã§æ¤ç´¢ãã¦å¯¾å¦æ¹æ³ã調ã¹ãã¨æããã¾ããããã§ã以ä¸ã®URLã§SQLã¤ã³ã¸ã§ã¯ã·ã§ã³å¯¾çæ¹æ³ãæ¤ç´¢ããçµæã®ä¸ä½ã®ã¨ã³ããªãæ¤è¨¼ãã¦ã¿ããã¨æãç«ã¡ã¾ããã http://www.google.co.jp/search?q=SQLã¤ã³ã¸ã§ã¯ã·ã§ã³å¯¾ç ã©ãã¾ã§èª¿ã¹ããã§ããã以åNH
ã¯ããã« æ¬ç¨¿ã§ã¯ããã¤ã¯ãã½ããã®æ°ããéçºç°å¢ã§ãããWebMatrixãã«ã¤ãã¦ç´¹ä»ãã¾ããWebMatrixã®æ©è½ãä½¿ç¨æ¹æ³ã«ã¤ãã¦èª¬æããå®éã«WebMatrixã使ç¨ãã¦ãã¼ã¿ãã¼ã¹ã¨é£æºãããµã³ãã«Webãµã¤ãã使ãã¦ã¿ã¾ãã 対象èªè WebMatrixã«é¢å¿ãããæ¹ Razorã«é¢å¿ãããæ¹ WebMatrixã使ç¨ããWebãµã¤ãã®éçºã«é¢å¿ãããæ¹ WebMatrixã®ç´¹ä» WebMatrixã¨ã¯ã2010å¹´7æã«ã¢ãã¦ã³ã¹ããããã¤ã¯ãã½ããã«ããæ°ããWebãµã¤ãéçºç°å¢ã§ãã以åã®ãASP.NET Web Matrixãã¨ååãä¼¼ã¦ãããã®ã®ãå ¨ãç°ãªãæ°ããéçºãã¼ã«ã§ããæ¬ç¨¿å·çæç¹ã§ã¯ãWebMatrix Beta 3ãææ°ã¨ãªã£ã¦ãã¾ãã WebMatrixã¯ãVisual Studioã¨åæ§ãASP.NETã«ããWebã¢ããªã±ã¼ã·ã§ã³éçºããµãã¼ãã
SQLã®ããã°ã©ãã³ã°ã¯å¥¥ãæ·±ããç¹ã«ããã©ã¼ãã³ã¹ã®è¦³ç¹ãããããè¨ããã ããã ã¿ãªãããæ¿ç¥ã®éããåãçµæãåºãããã°ã©ã ã§ããSQLã®æ¸ãæ¹æ¬¡ç¬¬ã§å¦çæéã«ä½åãã®å·®ãçãå¾ããå¹çã®æªãSQLãæ¸ãã¦ãã¾ãåå ã¯ãå¤ãã®å ´åããªã¬ã¼ã·ã§ãã«ãã¼ã¿ãã¼ã¹ã®å é¨åä½ãã¢ããªã±ã¼ã·ã§ã³ã«é¢ããçè§£ä¸è¶³ã§ããã両è ãããç¥ã£ãä¸ã§æé©ãªSQLãæ¸ããããã«ãªããã¨ã¯ãã·ã¹ãã ã¨ã³ã¸ãã¢ã¨ãã¦ã®éè¦ãªã¹ãã«ã®ä¸ã¤ã§ããã ç¹éãåºç¤ããçè§£ãããã¼ã¿ãã¼ã¹ã®ããã¿ãã§ã¯ããªã¬ã¼ã·ã§ãã«ãã¼ã¿ãã¼ã¹ã®å é¨åä½ã«ã¤ãã¦ãåºæ¬çãªé¨åãåããããã解説ãã¦ãããSQLããã°ã©ãã³ã°ã«å½¹ç«ã¤ãã¨ã¯ãã¡ãããSQLãã¥ã¼ãã³ã°ããã¼ã¿ãã¼ã¹è¨è¨ã®ããã®åºç¤ç¥èã¨ãã¦ãä¸å¯æ¬ ã ã ã¤ã³ãããã¯ã·ã§ã³ ãã©ãã¯ããã¯ã¹ã®ã¾ã¾ã§ããã®ï¼ Part 1ï¼SQLæã¯ã©ã®ããã«å®è¡ãããã®ã SQLå®è¡ã¾ã§ã®
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}