[B! sql] y2_naranjaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

y2_naranja id:y2_naranja

sqlã«é–¢ã™ã‚‹y2_naranjaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ãŒSQLã‚’ä½¿ãˆã¦ã‚ˆã‹ã£ãŸè©± - ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰é–‹ç™ºè€…ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€‚ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ã®å·åŽŸç”°ã§ã™ã€‚ ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã§ãŠæ°—ã«å…¥ã‚Šãƒ¬ã‚·ãƒ”ã‚’ä¿å˜ã™ã‚‹ã€ŒMYãƒ•ã‚©ãƒ«ãƒ€ã€ã®ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºã‚„ã€ä¿å˜ãƒ»è¨˜éŒ²ã«é–¢ã™ã‚‹æ–°è¦ã‚µãƒ¼ãƒ“ã‚¹ã®æ¤œè¨Žãƒ»é–‹ç™ºã‚’æ‹…å½“ã—ã¦ã„ã¾ã™ã€‚ ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ã®ä»•äº‹ã¯æ§˜ã€…ã‚ã‚Šã¾ã™ãŒã€ä»Šå›žã¯ç§ãŒèº«ã«ã¤ã‘ãŸã“ã¨ã§ä»•äº‹é ˜åŸŸãŒåºƒãŒã£ãŸï¼ã¨æ„Ÿã˜ã¦ã„ã‚‹SQLã«ã¤ã„ã¦ãŠè©±ã—ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã„ããªã‚Šã§ã™ãŒã€SQLãŒä½¿ãˆã¦ã‚ˆã‹ã£ãŸç‚¹ã‚’ã¾ã¨ã‚ã‚‹ã¨ä»¥ä¸‹ã§ã™ã€‚ ã‚ˆã‹ã£ãŸã“ã¨ æ•°å€¤æŠ½å‡ºã‹ã‚‰åˆ†æžã¾ã§è‡ªå·±å®Œçµ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¨ã®ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã‚¹ãƒ ãƒ¼ã‚ºã« ä»•äº‹ãŒå¢—ãˆã¦ã„ãã†ã§å®Ÿã¯åŠ¹çŽ‡ã‚¢ãƒƒãƒ— å‘¨å›²ã®çŸ¥çš„å¥½å¥‡å¿ƒã‚’åˆºæ¿€ ãã‚Œãžã‚Œå…·ä½“ä¾‹ã‚’äº¤ãˆã¦ãŠè©±ã—ã¾ã™ã€‚ æ•°å€¤æŠ½å‡ºã‹ã‚‰åˆ†æžã¾ã§è‡ªå·±å®Œçµ äº‹ä¾‹ï¼‘ï¼šãƒã‚°æ§‹é€ ã‚’ç†è§£ã§ãå¾Œã®ä»•äº‹ãŒã‚¹ãƒ ãƒ¼ã‚ºã« æ˜¨å¹´ã€ã‚¢ãƒ—ãƒªã®ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºã‚’æ‹…å½“ã—ãŸéš›ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®è¨å®šã—ãŸãƒã‚°ãŒã€å®Ÿéš›ã«é€ä¿¡ã•ã‚Œã‚‹ã‹ã©ã†ã‹ã‚’äº‹å‰ãƒã‚§ãƒƒã‚¯ã‚’ã—ã¾ã—ãŸ*1ã€‚ ã‚¢ãƒ—ãƒªã®ãƒªãƒªãƒ¼ã‚¹ã¯ã‚¿ã‚¤ãƒŸãƒ³ã‚°ãŒæ±ºã‚ã‚‰ã‚Œ
y2_naranja 2016/07/06
ã„ã„è©±ã â€¦ã€‚

COOKPAD

SQL
ãƒªãƒ³ã‚¯
ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€‘å¾³ä¸¸å…ˆç”Ÿã«æ€’ã‚‰ã‚Œãªã„ã€å‹•çš„SQLã®å®‰å…¨ãªçµ„ã¿ç«‹ã¦æ–¹
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ãƒ»ãƒ»ãƒ»é§†é€ã—ã¦ã‚„ã‚‹ï¼ï¼ ã“ã®ä¸–ã‹ã‚‰ãƒ»ãƒ»ãƒ»ä¸€åŒ¹æ®‹ã‚‰ãšï¼ï¼ (PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2015) Read less
y2_naranja 2015/10/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SlideShare

SQL

å¾³ä¸¸æ¡ˆä»¶
ãƒªãƒ³ã‚¯
JSON SQL Injectionã€PHPãªã‚‰JSONãªã—ã§ã‚‚ã§ãã‚‹ã‚ˆ
DeNAã®å¥¥ã•ã‚“ã¨ã€ã¯ã‚‹ã·ã•ã‚“ãŒJSON SQL Injectionã«ã¤ã„ã¦å…¬è¡¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ The JSON SQL Injection Vulnerability ä¸æ£ãªJSONãƒ‡ãƒ¼ã‚¿ã«ã‚ˆã‚‹SQL Injectionã¸ã®å¯¾ç–ã«ã¤ã„ã¦ (Json.pm+SQLã‚¯ã‚¨ãƒªãƒ“ãƒ«ãƒ€ãƒ¼) ä¸Šè¨˜ã®è¨˜äº‹ã¯ã€ä¸»ã«Perlã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒJSONãƒ‡ãƒ¼ã‚¿ã‚’å—ã‘å–ã‚‹ã‚·ãƒŠãƒªã‚ªã§èª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€ã“ã®çµ„ã¿åˆã‚ã›ã«é™å®šã—ãŸã¯ãªã—ã§ã¯ãªã„ã‚ã‘ã§ã€ãã‚Œã§ã¯PHPã§ã¯ã©ã†ã ã‚ã†ã¨æ€ã„èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ JSON SQL Injectionã¨ã¯ ä»¥ä¸‹ã€ã¯ã‚‹ã·ã•ã‚“ã®ã€Œä¸æ£ãªJSONãƒ‡ãƒ¼ã‚¿ã«ã‚ˆã‚‹â€¦ã€ã«ã—ãŸãŒã£ã¦JSON SQL Injectionã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ Perlå‘ã‘ã®SQLã‚¸ã‚§ãƒãƒ¬ãƒ¼ã‚¿ã®ä¸€ã¤ã§ã‚ã‚‹SQL::Makerã«ãŠã„ã¦ã€ä»¥ä¸‹ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’æƒ³å®šã—ã¾ã™ã€‚ my ($sql, @bind) = $builde
y2_naranja 2014/08/11
JSON

PHP

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

injection

sql
ãƒªãƒ³ã‚¯
ã“ã‚Œã‹ã‚‰MySQLã‚’ã‚¤ãƒã‹ã‚‰å¦ã¶äººã«æ§ã’ãŸã„23å€‹ã®ã‚³ãƒžãƒ³ãƒ‰ãƒªã‚¹ãƒˆ
ã©ãƒ¼ã‚‚ã€‚ä»Šå¹´ã®æ˜¥é ƒã‹ã‚‰MySQLã‚’å¦ã³å§‹ã‚ãŸã€ã™ã‚‹ã·ï¼ˆ @isloop ï¼‰ã§ã™ã€‚ å¦ã³åˆã‚ã®ã“ã‚ã¯ã€ã€ŒãŸã‹ã ã‹æ–‡å—åˆ—ã‚’è¨˜éŒ²ã™ã‚‹ã ã‘ã§ãªã‚“ã¦ã‹ã£ãŸã‚‹ã„ã‚“ã ã€‚ã‚„ã£ã±ã‚ŠCSVä¿å˜ã«é€ƒã’ã‚ˆã†ã‹ãªã€‚ã€ã¨æ€ã£ã¦ã„ã¾ã—ãŸã€‚ãŒã€æœ€è¿‘ã«ãªã£ã¦ã‚ˆã†ã‚„ãæ…£ã‚Œã¦ããŸã‚ˆã†ã§ã€ã€Œçµæ§‹ä¾¿åˆ©ã˜ã‚ƒã‚“MySQLã€ã¨æ€ãˆã‚‹ã‚ˆã†ã«ãªã£ã¦ãã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šæ—¥ã¯ã€å¦ã³åˆã‚ã®é ƒã«æ¬²ã—ã‹ã£ãŸã€Œã¨ã‚Šã‚ãˆãšã“ã‚Œã ã‘è¦šãˆãŸã‚‰ãªã‚“ã¨ã‹ãªã‚‹MySQLã®ã‚³ãƒžãƒ³ãƒ‰ãƒªã‚¹ãƒˆã€ã¨ã„ã†ã‚‚ã®ã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ ã“ã‚Œã‹ã‚‰MySQLã‚’ã‚¤ãƒã‹ã‚‰å¦ã³ãŸã„ã¨ã„ã†äººãŒå‚è€ƒã«ãªã‚Œã°ã“ã‚Œå¹¸ã„ã€‚
y2_naranja 2014/07/15
åŠåˆ†ä»¥ä¸ŠSQLæ–‡ã ã‘ã©ã€ŒMySQLã«ã¯CHANGEã‚³ãƒžãƒ³ãƒ‰ãŒã‚ã£ã¦â€¦ã€ã¨ã„ã¡ã„ã¡è¨€ã„è¨³ã—ã¦ã„ãŸæŠ€è¡“è€…ãŒã„ãŸã®ã§ã€ã“ã‚Œã ã‘ã¯ãŠã•ãˆã¦ãŠã“ã†ã€‚ä½¿ã‚ãªã„ã§æ¸ˆã‚€é‹ç”¨ãŒãƒ™ã‚¹ãƒˆã ã‘ã©

MySQL

database

sql
ãƒªãƒ³ã‚¯
SQLã‚’ä½œã£ãŸäººãŸã¡ - æœªæ¥ã®ã„ã¤ã‹/hyoshiokã®æ—¥è¨˜
ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ (RDBMS)ã¯è¨€ã†ã¾ã§ã‚‚ãªã„ã“ã¨ã ã‘ã©ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ç®¡ç†ã®åŸºç¤Žä¸ã®åŸºç¤Žã ã€‚NoSQLã¨ã„ã†RDBMSã§ã¯ãªã„ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ãŒå‡ºã¦æ¥ã¦ã„ã‚‹ãŒãã‚Œã‚‚SQLãŒã‚ã£ã¦ã“ãã®NoSQLã ã€‚ ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ¢ãƒ‡ãƒ«ã¯IBM E.F. Coddåšå£«ãŒæå”±ã—ãŸã€‚Edgar F. Codd - Wikipedia Coddåšå£«ã¯å¾Œã«ãƒãƒ¥ãƒ¼ãƒªãƒ³ã‚°è³žã‚’å—è³žã—ã¦ã„ã‚‹ã€‚ http://en.wikipedia.org/wiki/File:Edgar_F_Codd.jpg ãã®ãƒ‡ãƒ¼ã‚¿ãƒ¼ãƒ¢ãƒ‡ãƒ«ã‚’åˆ©ç”¨ã—ãŸãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã®ãƒ—ãƒãƒˆã‚¿ã‚¤ãƒ—ãŒSystem Rã ã€‚IBM System R - Wikipedia 1974å¹´ã”ã‚ç™ºè¡¨ã•ã‚ŒãŸã€‚ ãã®æˆæžœã®ä¸€ã¤ãŒSQLã ã€‚èª°ã§ã‚‚ä½¿ã£ã¦ã„ã‚‹SQLã¯System Rã®è«–æ–‡ãŒç™ºç¥¥ã®åœ°ã§ã‚ã‚‹ã€‚ãã—ã¦ãã®è«–æ–‡ã‚’èªã‚“ã§RDBMSã‚’ä½œã£ãŸç”·ãŒL
y2_naranja 2014/06/27
sql

DB

æ´å²
ãƒªãƒ³ã‚¯
åœ°ç„ã®ã‚ˆã†ã«ã‚ˆãã‚ã‹ã‚‹SQLãƒ†ãƒ¼ãƒ–ãƒ«çµåˆ - ã“ã›ãã®æŠ€è¡“æ—¥è¨˜
ãƒ†ãƒ¼ãƒ–ãƒ«ã®JOINãŒè‹¦æ‰‹ã§ã—ãŸãŒã€ã“ã®ä¾‹ã‚’æ€ã„ã¤ã„ã¦ã‹ã‚‰ã¯ã€ã™ã£ãã‚Šãã£ãã‚Šç†è§£ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã‚€ã—ã‚é ã‹ã‚‰é›¢ã‚Œã¾ã›ã‚“â€¦â€¦ã€‚ â€» INNERã€OUTERã¯é£¾ã‚Šã€‚çœç•¥ã§ãã‚‹ã€‚ INNER JOIN â†’ JOIN LEFT OUTER JOIN â†’ LEFT JOIN RIGHT OUTER JOIN â†’ RIGHT JOIN â€» ON ...=... ã‚’ã¾ã¨ã‚ã¦ USING(å±žæ€§) ã¨æ›¸ã‘ã‚‹ã€‚ â€» ä½•ã§çµåˆã™ã‚‹ã‹è¨€ã†ã¾ã§ã‚‚ãªã„æ™‚ã¯ã€NATURALã‚’æŒ‡å®šã™ã‚‹ã¨å‹æ‰‹ã«JOINã—ã¦ãã‚Œã‚‹ã€‚NATURALã«JOINã—ã¦â€¦â€¦ã€‚ â€» WHEREã¯çµåˆã—ãŸçµæžœã«ä½œç”¨ã™ã‚‹ã€‚ â€» ç¾å®Ÿã«ã¯ä¸Šå›³ã®ã‚ˆã†ã«1å¯¾1ã§çµåˆã—ã¾ã›ã‚“ã€‚ â€» ãŠã¾ã‘ã€‚CROSS JOINã€‚ ã“ã‚“ãªã®ä½¿ã„ã¾ã›ã‚“ã€‚ ãƒ–ã‚¯ãƒžç”¨ç”»åƒã€‚
y2_naranja 2010/09/17
CROSSã¯ä½¿ã£ãŸã“ã¨ãªã„ã€‚NATURAL JOINã¯ã“ã®ãŸã¨ãˆã ã¨é›£ã—ã„ã‹ã‚‚ã€‚UNIONã®èª¬æ˜Žã‚‚å…¥ã‚ŒãŸã‚‰ãã£ã¨ã‚«ã‚ªã‚¹ã€‚

sql

database

ãƒã‚¿
ãƒªãƒ³ã‚¯
1