Sujet : Re: Article on new mainframe use
De : gneuner2 (at) *nospam* comcast.net (George Neuner)
Groupes : comp.archDate : 16. Aug 2024, 18:43:27
Autres entêtes
Organisation : i2pn2 (i2pn.org)
Message-ID : <kmvubjdn7ub4bkgfhpj89c5vsl37vpp16d@4ax.com>
References : 1 2 3 4 5 6
User-Agent : ForteAgent/8.00.32.1272
On Fri, 16 Aug 2024 02:05:27 -0000 (UTC), Lawrence D'Oliveiro
<
ldo@nz.invalid> wrote:
The best way to interface to [relational] DBMS was to be able to generate SQL
strings on the fly; but this required some facility with manipulation of
dynamic, variable-length strings, which COBOL completely lacked. And so
special extensions were tacked on, just to cope with the generation of SQL
queries and templates.
You mean the *WORST* way.
Just about every SQL injection attack is made possible by programmers
dynamically generating queries. Most[1] attacks can be prevented
simply by proper use of SQL parameters.
There are only a few situations in which dynamic SQL actually is
necessary - it is not possible to specify table or column names using
parameters, so to reuse a query with a different table or column name
does require generating new query text.
Some applications do have a need to do this - but in most cases the
names to use will be known statically, will be predictable (e.g., date
related), or, if necessary, can be discovered by querying the database
schema - so they should not be provided by user input.
The only exception is to permit a user to create a new *custom* table
type ... but there is little/no need for most applications to do this.
Most applications that must create new tables at runtime know what
names to use, and/or how to generate them, and do not need any input
from a user to do so.
If creating custom table types with user specified names even is
permitted by the application, it should be an operation reserved to
privileged users [presumably who know what they are doing].
---
[1] many RDBMS now directly support JSON and/or XML data, and it is
possible via SQL parameters to inject false "path" information for
working with these data types. To guard against this the application
itself has to be aware of the data layout.
Date | Sujet | # | | Auteur |
14 Aug 24 | Article on new mainframe use | 132 | | Stephen Fuld |
14 Aug 24 | Re: Article on new mainframe use | 124 | | MitchAlsup1 |
15 Aug 24 | Re: Article on new mainframe use | 123 | | George Neuner |
15 Aug 24 | Re: Article on new mainframe use | 1 | | Stephen Fuld |
15 Aug 24 | Re: Article on new mainframe use | 121 | | MitchAlsup1 |
15 Aug 24 | Re: Article on new mainframe use | 1 | | Stephen Fuld |
15 Aug 24 | Re: Article on new mainframe use | 118 | | Niklas Holsti |
16 Aug 24 | Re: Article on new mainframe use | 117 | | Lawrence D'Oliveiro |
16 Aug 24 | Re: COBOL, Article on new mainframe use | 30 | | John Levine |
17 Aug 24 | Re: COBOL, Article on new mainframe use | 5 | | Lawrence D'Oliveiro |
17 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | John Levine |
17 Aug 24 | Re: COBOL, Article on new mainframe use | 3 | | Keith Thompson |
18 Aug 24 | Re: coroutines in COBOL, Article on new mainframe use | 2 | | John Levine |
18 Aug 24 | Re: coroutines in COBOL, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
18 Aug 24 | Re: COBOL, Article on new mainframe use | 24 | | OrangeFish |
18 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | John Levine |
18 Aug 24 | Re: COBOL, Article on new mainframe use | 22 | | John Dallman |
18 Aug 24 | Re: COBOL, Article on new mainframe use | 14 | | MitchAlsup1 |
19 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | John Dallman |
23 Aug 24 | Re: COBOL, Article on new mainframe use | 12 | | Terje Mathisen |
23 Aug 24 | Re: COBOL, Article on new mainframe use | 11 | | Michael S |
23 Aug 24 | Re: COBOL, Article on new mainframe use | 10 | | Terje Mathisen |
23 Aug 24 | Re: COBOL, Article on new mainframe use | 9 | | Michael S |
23 Aug 24 | Re: COBOL, Article on new mainframe use | 6 | | John Levine |
24 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
27 Aug 24 | Re: COBOL, Article on new mainframe use | 4 | | Keith Thompson |
28 Aug 24 | Re: COBOL, Article on new mainframe use | 3 | | MitchAlsup1 |
28 Aug 24 | Re: COBOL, Article on new mainframe use | 2 | | Keith Thompson |
2 Sep 24 | Re: COBOL, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
24 Aug 24 | Re: COBOL, Article on new mainframe use | 2 | | John Dallman |
28 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
19 Aug 24 | Re: COBOL, Article on new mainframe use | 7 | | Lawrence D'Oliveiro |
19 Aug 24 | Re: COBOL, Article on new mainframe use | 6 | | John Levine |
21 Aug 24 | Re: COBOL, Article on new mainframe use | 5 | | Lawrence D'Oliveiro |
21 Aug 24 | Re: COBOL, Article on new mainframe use | 4 | | Keith Thompson |
21 Aug 24 | Re: COBOL, Article on new mainframe use | 3 | | MitchAlsup1 |
21 Aug 24 | Re: COBOL, Article on new mainframe use | 1 | | Keith Thompson |
2 Sep 24 | Re: COBOL, Article on new mainframe use | 1 | | Tim Rentsch |
16 Aug 24 | Re: Article on new mainframe use | 82 | | George Neuner |
22 Aug 24 | Re: Article on new mainframe use | 81 | | BGB |
23 Aug 24 | Re: Article on new mainframe use | 1 | | Stephen Fuld |
23 Aug 24 | Re: Article on new mainframe use | 79 | | Lawrence D'Oliveiro |
23 Aug 24 | Re: Article on new mainframe use | 77 | | BGB |
23 Aug 24 | Re: libraries, was Article on new mainframe use | 1 | | John Levine |
24 Aug 24 | Re: Article on new mainframe use | 75 | | Lawrence D'Oliveiro |
24 Aug 24 | Re: Article on new mainframe use | 1 | | BGB |
24 Aug 24 | Re: Article on new mainframe use | 73 | | John Levine |
28 Aug 24 | Re: Article on new mainframe use | 70 | | Lawrence D'Oliveiro |
29 Aug 24 | Re: Article on new mainframe use | 69 | | John Levine |
30 Aug 24 | Re: Article on new mainframe use | 68 | | Lawrence D'Oliveiro |
30 Aug 24 | Re: Article on new mainframe use | 67 | | Michael S |
30 Aug 24 | Re: Article on new mainframe use | 12 | | John Levine |
30 Aug 24 | Re: tiny COBOL, Article on new mainframe use | 11 | | John Levine |
31 Aug 24 | Re: tiny COBOL, Article on new mainframe use | 8 | | Stefan Monnier |
31 Aug 24 | Re: tiny COBOL, Article on new mainframe use | 5 | | Thomas Koenig |
2 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 4 | | Terje Mathisen |
2 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 2 | | Thomas Koenig |
2 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 1 | | Anssi Saari |
2 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 1 | | Anton Ertl |
31 Aug 24 | Re: tiny COBOL, Article on new mainframe use | 1 | | Anton Ertl |
31 Aug 24 | Re: tiny COBOL, Article on new mainframe use | 1 | | George Neuner |
2 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 2 | | Lawrence D'Oliveiro |
4 Sep 24 | Re: tiny COBOL, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
1 Sep 24 | Re: Article on new mainframe use | 6 | | Lawrence D'Oliveiro |
1 Sep 24 | Re: COBOL history, Article on new mainframe use | 3 | | John Levine |
1 Sep 24 | Re: COBOL history, Article on new mainframe use | 1 | | Lynn Wheeler |
2 Sep 24 | Re: COBOL history, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
1 Sep 24 | Re: Article on new mainframe use | 2 | | John Dallman |
2 Sep 24 | Re: Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
1 Sep 24 | Re: Article on new mainframe use | 48 | | Lawrence D'Oliveiro |
1 Sep 24 | Re: Article on new mainframe use | 47 | | MitchAlsup1 |
2 Sep 24 | Re: Article on new mainframe use | 46 | | Lawrence D'Oliveiro |
2 Sep 24 | Re: Address bits again, Article on new mainframe use | 45 | | John Levine |
2 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Thomas Koenig |
2 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Stephen Fuld |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 42 | | Lawrence D'Oliveiro |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 2 | | Terje Mathisen |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 39 | | John Levine |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 37 | | John Dallman |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | MitchAlsup1 |
5 Sep 24 | transparent huge pages (was: Address bits again) | 4 | | Anton Ertl |
5 Sep 24 | Re: transparent huge pages | 1 | | MitchAlsup1 |
5 Sep 24 | Re: transparent huge pages | 1 | | Chris M. Thomasson |
8 Sep 24 | Re: transparent huge pages (was: Address bits again) | 1 | | Lawrence D'Oliveiro |
5 Sep 24 | Re: Address bits again, Article on new mainframe use | 31 | | John Levine |
8 Sep 24 | Re: Address bits again, Article on new mainframe use | 30 | | Lawrence D'Oliveiro |
8 Sep 24 | Re: Address bits again, Article on new mainframe use | 29 | | MitchAlsup1 |
8 Sep 24 | Re: Address bits again, Article on new mainframe use | 4 | | MitchAlsup1 |
8 Sep 24 | Re: Address bits again, Article on new mainframe use | 3 | | Chris M. Thomasson |
9 Sep 24 | Re: Address bits again, Article on new mainframe use | 2 | | Lawrence D'Oliveiro |
9 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Chris M. Thomasson |
9 Sep 24 | Re: Address bits again, Article on new mainframe use | 24 | | Lawrence D'Oliveiro |
9 Sep 24 | Re: Address bits again, Article on new mainframe use | 23 | | MitchAlsup1 |
10 Sep 24 | Re: Address bits again, Article on new mainframe use | 22 | | Lawrence D'Oliveiro |
11 Sep 24 | Re: Address bits again, Article on new mainframe use | 2 | | John Levine |
11 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
11 Sep 24 | Re: Address bits again, Article on new mainframe use | 19 | | MitchAlsup1 |
12 Sep 24 | Re: Address bits again, Article on new mainframe use | 18 | | Lawrence D'Oliveiro |
12 Sep 24 | Re: Address bits again, Article on new mainframe use | 17 | | Lars Poulsen |
12 Sep 24 | Re: Address bits again, Article on new mainframe use | 13 | | Lawrence D'Oliveiro |
13 Sep 24 | Re: Address bits again, Article on new mainframe use | 3 | | George Neuner |
4 Sep 24 | Re: Address bits again, Article on new mainframe use | 1 | | Lawrence D'Oliveiro |
28 Aug 24 | Re: Article on new mainframe use | 2 | | Lawrence D'Oliveiro |
23 Aug 24 | Re: Article on new mainframe use | 1 | | George Neuner |
16 Aug 24 | Re: Article on new mainframe use | 4 | | Lynn Wheeler |
15 Aug 24 | Re: Article on new mainframe use | 1 | | Thomas Koenig |
15 Aug 24 | Re: Article on new mainframe use | 7 | | Lawrence D'Oliveiro |