动态 SQL 应用、性能和安全：掌握 Microsoft SQL Server 的强大功能

需积分: 9 195 浏览量更新于2024-07-20 收藏 13.13MB PDF 举报

"Dynamic SQL Applications, Performance, and Security" Dynamic SQL 是 Microsoft SQL Server 中的一个强大功能，它可以根据用户输入的条件进行大规模搜索、生成值列表、动态旋转数据以进行商业智能报表，并且可以自定义数据库对象和查询其结构。然而，Dynamic SQL 也存在一些安全问题，如 SQL 注入攻击，因此需要了解和掌握 Dynamic SQL 的使用和安全机制。本书 "Dynamic SQL: Applications, Performance, and Security"prehensive introduction to the many uses of dynamic SQL in Microsoft SQL Server，旨在帮助开发者和数据库管理员提高他们的 T-SQL 编码技能，掌握 Dynamic SQL 的应用、性能优化和安全机制。本书共分为 11 章，分别介绍了 Dynamic SQL 的基本概念、SQL 注入攻击防护、large-scale searching、权限和安全、作用域管理、性能优化、可扩展的动态列表、参数嗅探、动态 PIVOT 和 UNPIVOT、解决常见问题等内容。 Chapter 1 介绍了 Dynamic SQL 的基本概念，包括什么是 Dynamic SQL、它的优点和缺点等。Chapter 2 讨论了如何防止 SQL 注入攻击，包括输入验证、参数化查询和输入安全等方法。Chapter 3 介绍了使用 Dynamic SQL 进行大规模搜索的方法和技术。Chapter 4 讨论了 Dynamic SQL 在权限和安全方面的应用和机制。Chapter 5 介绍了 Dynamic SQL 的作用域管理机制。Chapter 6 讨论了 Dynamic SQL 的性能优化方法和技术。Chapter 7 介绍了可扩展的动态列表的应用和实现方法。Chapter 8 讨论了参数嗅探的机制和应用。Chapter 9 介绍了 Dynamic SQL 在动态 PIVOT 和 UNPIVOT 方面的应用和实现方法。Chapter 10 论述了 Dynamic SQL 中的常见问题和解决方法。Chapter 11 介绍了 Dynamic SQL 的其他应用场景和实现方法。本书为开发者和数据库管理员提供了一个系统的指南，帮助他们掌握 Dynamic SQL 的应用、性能优化和安全机制，提高他们的 T-SQL 编码技能，并为组织提供竞争优势。 Dynamic SQL 的应用场景包括： * 大规模搜索 * 生成值列表 * 动态旋转数据 * 自定义数据库对象和查询结构 * 商业智能报表 * 应用程序的灵活性和响应速度 Dynamic SQL 的性能优化方法和技术包括： * 参数化查询 * 输入验证 * 缓存机制 * 并行处理 * 索引优化 Dynamic SQL 的安全机制包括： * 输入验证 * 参数化查询 * 权限和安全机制 * 加密和解密机制本书为开发者和数据库管理员提供了一个系统的指南，帮助他们掌握 Dynamic SQL 的应用、性能优化和安全机制，提高他们的 T-SQL 编码技能，并为组织提供竞争优势。

About the Technical Reviewer

Kathi Kellenberger, known to the Structured Query Language (SQL)

community as Aunt Kathi, is an independent SQL Server consultant

associated with Linchpin People and an SQL Server MVP. She loves

writing about SQL Server and has contributed to a dozen books as an

author, coauthor, or technical editor. Kathi enjoys spending free time with

family and friends, especially her five grandchildren. When she is not

working or involved in a game of hide-and-seek or Candy Land with the

kids, you may find her at the local karaoke bar. Kathi blogs at

www.auntkathisql.com .

Introduction

Dynamic SQL is often described in bits and pieces, often when a need for code arises and time is limited.

This book is an opportunity to put as many of those fragments together into a meaningful journey, from

defining the technology to delving into its deepest and most complex aspects. This is a dive into many

topics that are extremely important when working with any database. It will intentionally delve deeper into

performance optimization, application development, and security than may seem necessary.

What Is This Book?

This is meant to be a discussion of smart database design and architecture, with a focus on Dynamic SQL.

If any topic that is covered in an aside feels incomplete, it is because there simply isn't room in these pages

for a thorough analysis of all of them without losing focus on why you are here. Dynamic SQL is often

underused, misused, or overused. The many tangents into other arenas of design and development serve

as guides to keep you on track and emphasize the value of well-written database queries as well as ensuring

that you use Dynamic SQL for the correct applications.

Each chapter delves into a specific topic and attempts to go into as much detail as possible, while also

providing multiple examples to demonstrate it in the simplest way possible. If you have never written a line

of Dynamic SQL, this will be an opportunity to learn, practice, and immediately apply it. If you already have

experience in writing and using Dynamic SQL, this will be a chance to learn new applications while getting a

refresher on those you have worked with in the past.

Intended Audience

Anyone with a healthy interest in database administration or development can benefit from the topics

covered in this book. Each chapter starts out with basic definitions and examples, providing an easy entry

point for professionals with any level of experience. The book transitions into more advanced techniques,

allowing you to not only learn the basics of an important subject, but also to gain access to scripts and ideas

that could be tested and used to solve problems you may face in your everyday experiences.

If you have a particular interest in database security or optimization, you will appreciate the focus

on these topics in each chapter. SQL Injection gets an exhaustive review, with many different aspects and

examples presented to ensure a thorough explanation of this important topic! Every chapter, regardless of

topic, will reference performance whenever possible. It is an oft-made mistake that a database is designed

with little data and few users, ignoring the possibility that it will one day grow into a behemoth. Reminders

are placed throughout this book to consider query performance at all times, even when performance may

seem “good enough”.

xix

剩余295页未读，继续阅读

ramissue

粉丝: 354
资源: 1487

动态 SQL 应用、性能和安全：掌握 Microsoft SQL Server 的强大功能

spring.datasource.dynamic.datasource

Failed to bind properties under 'spring.datasource.dynamic.datasource.url' to com.baomidou.dynamic.datasource.spring.boot.autoconfigure.DataSourceProperty

hive.exec.dynamic.partition

A component required a bean of type 'com.baomidou.dynamic.datasource.DynamicRoutingDataSource' that could not be found.

上述的问题采用mybatis-plus的方法，并且在连接数据库是采用spring.datasource.dynamic.datasource.master.driver-class-name=oracle.jdbc.OracleDriver spring.datasource.dynamic.datasource.master.url=jdbc:oracle:thin:@10.178.8.137:1521:gsjzzdb 这种发放来区分数据库的主次

com.baomidou.dynamic.datasource.spring.boot.autoconfigure.datasourceproperty

com.baomidou.dynamic.datasource.ds.AbstractRoutingDataSource

最新资源