|
.. or you could write an extended stored procedure ??
|
|
|
|
|
Hi, I'm having big trouble accessing recorset elements. I'm using ODBC(MSSQL) with CDatabase and CRecordset objects, I can perform SQL executes, and even seem to open recordsets without bother but come into trouble when I try to access a recordset field.
I have CDatabase* called pDB. I have used recordsets previously but only used to check the number of rows returned (and thus not attempted to read any fields).
As far as I can tell there shouldn't be a problem here (I've copied most of this section straight from MSDN). The SQL statement returns a 1 row of 1 field recordset and the datatype of that element is varchar.
Hi, I've written the following code
char strSQL[2048];
try {
sprintf(strSQL,"SELECT DataValue FROM dbo.SSEData WHERE (DataName = N'LOGON')");
printf("%s\n\n\n", strSQL);
CRecordset rs(pDB);
printf("Just setup Filter\n");
if ( rs.Open( CRecordset::snapshot, strSQL) )
printf("Just opened recordset\n");
else
printf("Failed to open recordset\n");
if (rs.GetRecordCount() == (long)0){
printf("No records found");
} else {
if ( rs.IsEOF() )
printf("The recordset was EOF");
if ( rs.IsBOF() )
printf("The recordset was BOF");
printf("Field Count : %d \n", rs.GetODBCFieldCount() );
rs.AssertValid();
printf("Recordset was greater than nothing\n");
CString CStartupMessage;
CDBVariant CVariantField;
printf("In between the first and last string\n");
// rs.GetFieldValue( (short)0, CVariantField );
rs.GetFieldValue( short(0), CStartupMessage);
printf("Got the field value\n");
}
rs.Close();
} catch(CDBException *e){
printf("Caught a DB exception\n");
e->Delete();
} catch(CMemoryException *m){
printf("Caught a memory error\n");
TCHAR ErrorMessage[256];
m->GetErrorMessage( ErrorMessage, 255);
printf("Finished capturing error %s\n", ErrorMessage);
}
The Output from this code is:
<database opened="" successfully="" +="" few="" operations="">
....
Just setup Filter
Just opened recordset
Field Count : 1
Recordset was greater than nothing
In between the first and last string
Caught a memory error
<end>
Can anybody help me ????
Thanks, Damian Del Campo (damian_jose@yahoo.com)
|
|
|
|
|
|
Can SQL Server 2000 and Oracle 9i live on the same machine?
|
|
|
|
|
Yes...;)
Best Regards
Carlos Antollini.
Sonork ID 100.10529 cantollini
|
|
|
|
|
Yes, can do...;)
Best Regards
Carlos Antollini.
Sonork ID 100.10529 cantollini
|
|
|
|
|
|
If I have a database on one hosting companies servers and it's huge like 300mb and I was interested in switching providers how would I transfer my database from one to the other...?
is there a command to convert binary database data into a text file dump of SQL INSERTS...?
If so...would I then just ask the new hosting company to convert the text file into binary again...?
Thanx again!
"An expert is someone who has made all the mistakes in his or her field" - Niels Bohr
|
|
|
|
|
Hockey wrote:
is there a command to convert binary database data into a text file dump of SQL INSERTS...?
Yes, the mysqldump command does exactly that (most other database severs have a similar dumping utility). You need command-line access to the database server to use that command.
|
|
|
|
|
If they're both using SQL Server search for "Detach" & "Attach"
on SQL Server 2000 right click the database tree node.
with SQL Server 7 I believe you'll have to use a couple of system stored procedures.
Andres Manggini.
Buenos Aires - Argentina.
|
|
|
|
|
I imagine SQLServer has similar priv tables...so i'll ask away.
Does the mySQL Hosts table allow you to specify which host people can open your database from...?
Like could this be used to prevent people from using my database on there own site...?
Is that the purpose behind the Hosts table...or does it limit users from accessing the database...
That doesn't seem to make sense, because I use a dialup ISP and my IP changes periodically (i think) so if I returned later the database might now recognize me...
Am I correct in thinking the host table serves the above mentioned purpose...?
Only scripts run on www.mydomain.com would have access to my database stored on mydomain.com...?
Please tell me I am correct...?
thanx!
"An expert is someone who has made all the mistakes in his or her field" - Niels Bohr
|
|
|
|
|
Hi
How do you protect sensitive data (like CC numbers)? Also, when an application needs a DSN (C++ app), is there a way to hide this DSN and the application can still have it, without being hardcoded, or without human intervention.
Michel
It is a lovely language, but it takes a very long time to say anything in it, because we do not say anything in it, unless it is worth taking a very long time to say, and to listen to.
- TreeBeard
|
|
|
|
|
Over the last few days I have read many tuts and a few books on database...alot of what I read wasn't what I wanted to know...database security for instance...anyways...after much reading I have come to conclusion that the general census for CC security is "Don't have CC #'s in your database PERIOD".
Although I figure public/private key encryption would do the trick considering thats what SSL uses. The books and tut's really stressed your clients lack of interest in having you store their password on a server...
Prolly a bad idea.
Cheers!
"An expert is someone who has made all the mistakes in his or her field" - Niels Bohr
|
|
|
|
|
In most situations it is not recommended to store CCs in a database. The reason for this is security and privacy. Unless you inform your users you are storing their CCs in a database you should probably avoid this. If all you need is transmission security, SSL is the only real option. Note: there are a few JavaScript/client-site encryption mechanisms out there too, but they would not be considered the norm by users.
If you do need to store this type of sensetive data I recommend using STRONG encryption on it when you store it in the database. The windows Crypto API can do this for you as well as numerous other libraries available from various vendors. Also many of the web-site certification comapnies require that if you do store CCs you must have a policy in place for purging the data within a specified amount of time (90 days seems like what I remember.)
If you really want to hide your DSN, put it in the registry and encrypt it also.
|
|
|
|
|
Yes you need to use a connection without a DSN for example:
strConnection = _T("Driver={SQL Server};Server=MyServerName;Trusted_Connection=no;Database=MyDatabaseName;Uid=MyUserName;Pwd=MyPassword;");
Best Regards
Carlos Antollini.
www.wanakostudios.com
Sonork ID 100.10529 cantollini
|
|
|
|
|
Tx a lot for the answers
If I shouldn't keep CC # in the database, where do you suggest I put them. Remember that the application needs them for later use (when settling the transaction for instance).
Michel
It is a lovely language, but it takes a very long time to say anything in it, because we do not say anything in it, unless it is worth taking a very long time to say, and to listen to.
- TreeBeard
|
|
|
|
|
If you must keep the CC's for an extended period of time (longer that the user stays on your site), then a database is probably the only good way to do this. The key (IMHO) is to secure the database and the numbers to the maximum level possible AND to have a good procedure in place for removing those numbers from the database in a timely manner. You must also keep all the other identifying information as well (name, address, etc.)
Basically, like I said before the key thing is encryption. The other thing you can do in addition to encryption is to further scamble the numbers by keeping various parts of the #'s encrypted in different ways and stored in different columns in a table. If you are using Oracle or SQL Server you can further increase security by using column level security and setting it up so that only a call to a stored procedure with a good (highly random) keycode can retrieve the CC values.
Before I would recommend to a customer to store CCs in a database accessed via web-based systems, I would want to insure that the database itself was properly secured and that the web sites exposing the database were properly secured.
|
|
|
|
|
You might be interested in this book.
Andy Gaskell, MCSD MCDBA
|
|
|
|
|
Howdy, I built an app that used ODBC to write to an SQL database. The client has just turned around and said that they wish to use OLEdb connection strings to tell my app where the server is (instead of ODBC DSNs).
Everything I've found on using OLEDB to access databases, is a whole pile of COM interface stuff with no real world examples. A far cry from the 'CDatabase' simplicity I'm used to.
Can anybody help me with this ?
All I need to do is to write some data via INSERT statements and do a few SELECT statements. I'm looking for some sample code or a tutorial with "real world" examples. Actually, anything that will help me do this in the few hours I have available to change my code.
Thanks to anybody who can help.
Damian Del Campo
|
|
|
|
|
|
Howdy, I downloaded you classes and was using them quite successfully.
*However*, I had to convert my app to UNICODE as the clients require this. Since I've done that, I can't find any way of passing a connection to the CADODatabase. Open method simply doesn't like what I'm passing it (& I'm pressuming all methods will be the same).
I've tried creating a char string and passing that to the database open function but it simply won't work either. All I get is an error message ->
CADODataBase Error
Code:80004005
Code meaning: Unspecified error
Source ||||||||||||||
Description |||||||||||||
Since I'm now passing it the same thing as I was before (char *) it should work, the fact that it doesn't makes me think that UNICODE must affect an include file that the ADO classes depend on in some way.
Do you know how I can get around this ??????
Thanks, Damian Del Campo
|
|
|
|
|
Sorry about that last comment, "my bad".
I won't tell you what the problem was as its rather embarassing.
Sorry again.
Damian
|
|
|
|
|
I just started with Visual C# .NET and I have some difficulties using a simple Acess database to show a table on a datagrid... I searched a lot before posting here. I always get this error even if I know the database is not open anywhere:
The Microsoft Jet database engine cannot open the file 'C:\test.mdb'. It is already opened exclusively by another user, or you need permission to view its data.
They say the error is at the line "adapter.Fill(DataSet);"... That's the only 2 lines I've written.
private void Page_Load(object sender, System.EventArgs e)
{
adapter.Fill(DataSet);
DataGrid1.DataBind();
}
adapter is my oleDbDataAdapter, DataSet is the dataSet that have been generated with the adapter when I ask him to SELECT * FROM CLIENT (where client is the only table in test.mdb)... DataGrid1 is my DataGrid control. I did the exact same thing they say to do in the help files in a walkthrough for data-acess with the datagrid control...
|
|
|
|
|
Crocmort wrote:
private void Page_Load(object sender, System.EventArgs e)
{
adapter.Fill(DataSet);
DataGrid1.DataBind();
}
Do you use it in ASP.NET? So you have to change the property of file and change the permission of file.(with write click on it)
Mazy
"The path you tread is narrow and the drop is shear and very high,
The ravens all are watching from a vantage point near by,
Apprehension creeping like a choo-train uo your spine,
Will the tightrope reach the end;will the final cuplet rhyme?"Cymbaline-Pink Floyd
|
|
|
|
|
Change the permission of the database or the permission of the ASP.NET file?? It's a Web Application project in Visual C#. But when I try the same thing in a Window Application in Visual C# with the DataGrid, it's working perfectly fine... I really don't know why it's not working...
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
