Welcome!

By registering with us, you'll be able to discuss, share and private message with other members of our community.

SignUp Now!
  • Guest, before posting your code please take these rules into consideration:
    • It is required to use our BBCode feature to display your code. While within the editor click < / > or >_ and place your code within the BB Code prompt. This helps others with finding a solution by making it easier to read and easier to copy.
    • You can also use markdown to share your code. When using markdown your code will be automatically converted to BBCode. For help with markdown check out the markdown guide.
    • Don't share a wall of code. All we want is the problem area, the code related to your issue.


    To learn more about how to use our BBCode feature, please click here.

    Thank you, Code Forum.

SQL tutorial

Antero360

Software Developer
Staff Team
Security Analyst
To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.
 
Benefits of learning SQL:
Websites that are not static, as well as mobile apps, connect to some sort of database. SQL is the language used to send information to and from the database, which is why it is called Structured Query Language. Being able to write queries for CRUD operations (CReate,Update,Delete) is essential for web/mobile development. Yes, there are tools out there that will take care of the queries for you, such as ORMs (Object-Relational Mapping), however, they are only as good as the simplicity of what you need your queries for...ORMs are not so great for complex queries, such as nested queries..
https://softwareengineering.stackex...why-do-we-not-push-them-to-use-a-higher-level
Great skill to have.
 
I like that article & it does indeed explain the concept well. A lot of people are hesitant to learn SQL, but it's definitely worth the trouble!

Here is a tutorial I made a while that goes over PHP Prepared Queries for SQL if anyone's interested :)
To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.
 
I like that article & it does indeed explain the concept well. A lot of people are hesitant to learn SQL, but it's definitely worth the trouble!

Here is a tutorial I made a while that goes over PHP Prepared Queries for SQL if anyone's interested :)
To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

WRITING SECURE SQL QUERIES:
1. SANITIZE YOUR INPUT BEFORE ANYTHING ELSE. (Server side validation, because javascript validate scripts can always be turned off in browser)
2. USE PARAMETERS FOR YOUR INPUT
3. BE PARTICULARLY AWARE OF MALICIOUS QUERIES, BETTER KNOW AS SQL-INJECTIONS AND BLIND SQL-INJECTIONS
4. NEVER, AND I REPEAT, NEVER STORE PASSWORDS AND/OR ANY VALUABLE INFORMATION IN PLAIN TEXT!!!!!
5. In regards to #4... DO NOT JUST USE A 2-WAY ENCRYPTION SERVICE SUCH AS AEA/DES... If at all possible, implement a 1-way encryption such as
SHA256/512 hashing with salt.
6. Before using SHA256/512 hash method, generate a SALT of 15+ random characters and append it to your input. Then pass that combination to your SHA256/512 hash method
7. Continuing #6. ONLY STORE GENERATED SALT AND RESULTING HASH IN DATABASE.
 

Buy us a coffee!

Back
Top Bottom