sql – Internetblog.org.uk

SQLite for Your Database Needs

Thu, 06 May 2010 18:20:27 +0000

In the web hosting world, certain database software is commonplace. Most system administrators, even the new ones, have heard of MySQL, MSSQL, and/or PostgreSQL. Using SQL databases typically requires a database server to be running on the system. MySQL, for example, runs as a service in Linux called mysqld, or something similar. An alternative to running these types of services is to use SQLite.

Because it does not run via a sever, SQLite does not require the configuration and maintenance of other database systems. As a result, it is considered light and easy to use. Rather than running on a server, the database code is linked directly with the software using it. The library itself is small and can be installed in smaller installations.

According to their website, SQLite is the most often deployed database engine used in many web applications. It is free and open source, without a license, released into the public domain. You can download the libraries at the SQLite website.

Data migration tips

Fri, 09 Apr 2010 22:39:22 +0000

Anytime you move to a new web host or upgrade to a new server, you will need to migrate your data. In the old days, data was often stored in flat files or simply directly within the HTML files. While the management eventually proved to be inefficient, it was much easier to move files. With databases, it can be trickier. Here are a few things to consider:

1. If you are moving to an identical setup (i.e. same version of the same content management system), a basic SQL export will work just fine with minimal to no data loss.

2. If you are changing versions of a CMS, you should read its documentation to see if migration is even possible and what steps you need to take to make it happen. If at all possible, upgrade to the identical version before migration.

3. When moving to a completely different CMS or database system, you will need to prepare your data. This can involve manipulating large chunks of a MySQL database or even exporting everything to XML. Some software like WordPress will import RSS posts from an XML file without any extra configuration, making a migration rather painless.

4. Backup everything as often as you can. If you mess something up, it is better to have to start over with your backup copy than to have to fix the only copy you have.

Photo Source: Flickr

Test Windows Server 2008 with MBSA

Thu, 18 Feb 2010 23:50:10 +0000

Microsoft provides a tool for Windows Server 2008 that tests for security misconfiguration. It comes with a graphical interface and a command line interface for both local and remote scans. It looks for vulnerabilities, performs assessment checks, and checks SQL Server 2005.

In addition to Windows Server 2008, MBSA runs on Windows Vista, Windows Server 2003, Windows XP, and Windows 2000 systems. It scans for misconfigurations on Internet Information Server (IIS), SQL Server, Internet Explorer, and MS Office.

MBSA is available for download from the Microsoft website. It is free to download and use on Windows systems. It comes with a readme.html document containing information on system requirements, scan options, and tool support options.

Source: Microsoft

Photo: Flickr

Databases are ripe for hacker exploitation

Mon, 22 Jun 2009 13:43:21 +0000

According to a new study by Verizon Business’ compuer forensics team, 30% of data security breeches in 2008 were initiated with database exploitation. Furthermore, of all the records breached, 75% were housed in databases. As the reliance on databases grows, particularly on large-scale websites, it is more crucial than ever for them to be secure.

“When you get down to it, a large percentage of the security threats potentially go after the database,” says Rich Mogull, analyst and founder of Securosis, an enterprise security consulting firm. Most information security practitioners grow up on the networking side of IT and know little about database technology, adds Mogull. And a recent Forrester Research study found that database administrators spend less than 5% of their time on database security.

In a recent poll by Oracle Users Group, they found that 26% of organizations take more than six months to patch their Oracle databases, leaving their servers and (more importantly) their information unsecured. SQL injection is a popular method of exploitation among hackers. They enter SQL strings into web applications, finding holes in whatever security a website has in place.

According to IBM’s ISS X-Force security research unit, SQL injection was the most common method of hacker attacks, growing by 134% since 2007. As more sensitive data is placed on the web and more companies rely on dynamic web-based applications, it more critical than ever for website owners to work in collaboration with one another to ensure that not only individual websites are secure, but that the entire web becomes an impenetrable wall.

Source: InformationWeek
Photo: Flickr