Skip to content
项目
群组
代码片段
帮助
正在加载...
帮助
为 GitLab 提交贡献
登录/注册
切换导航
H
h2database
项目
项目
详情
活动
周期分析
仓库
仓库
文件
提交
分支
标签
贡献者
分枝图
比较
统计图
议题
0
议题
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
CI / CD
CI / CD
流水线
作业
计划
统计图
Wiki
Wiki
代码片段
代码片段
成员
成员
折叠边栏
关闭边栏
活动
分枝图
统计图
创建新议题
作业
提交
议题看板
打开侧边栏
Administrator
h2database
Commits
806d03db
提交
806d03db
authored
17 年前
作者:
Thomas Mueller
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
--no commit message
--no commit message
上级
927afe2d
隐藏空白字符变更
内嵌
并排
正在显示
3 个修改的文件
包含
18 行增加
和
8 行删除
+18
-8
advanced.html
h2/src/docsrc/html/advanced.html
+2
-1
features.html
h2/src/docsrc/html/features.html
+7
-7
history.html
h2/src/docsrc/html/history.html
+9
-0
没有找到文件。
h2/src/docsrc/html/advanced.html
浏览文件 @
806d03db
...
...
@@ -496,7 +496,8 @@ database files, if they do not have a direct TCP/IP connection.
<br
/><a
name=
"sql_injection"
></a>
<h2>
Protection against SQL Injection
</h2>
<h3>
What is SQL Injection
</h3>
This database engine provides a solution for the security vulnerability known as 'SQL Injection'.
This database engine provides a solution for the security vulnerability known as 'SQL Injection'.
Here is a short description of what SQL injection means.
Some applications build SQL statements with embedded user input such as:
<pre>
String sql = "SELECT * FROM USERS WHERE PASSWORD='"+pwd+"'";
...
...
This diff is collapsed.
Click to expand it.
h2/src/docsrc/html/features.html
浏览文件 @
806d03db
...
...
@@ -90,27 +90,27 @@ Features
<h3>
SQL Support
</h3>
<ul>
<li>
Compatibility modes for HSQLDB, MySQL and PostgreSQL
</li><li>
Support for multiple schemas, information schema
<li>
Support for multiple schemas, information schema
</li><li>
Referential integrity / foreign key constraints with cascade, check constraints
</li><li>
Inner and outer joins, subqueries, read only views and inline views
</li><li>
Triggers and Java functions / stored procedures
</li><li>
Many built-in functions, including XML and lossless data compression
</li><li>
Wide range of data types including large objects (BLOB/CLOB)
</li><li>
Wide range of data types including large objects (BLOB/CLOB)
and arrays
</li><li>
Sequence and autoincrement columns, computed columns (can be used for function based indexes)
</li><li>
ORDER BY, GROUP BY, HAVING, UNION, LIMIT, TOP
</li><li>
Collation support, Users, Roles
</li><li>
Collation support, users, roles
</li><li>
Compatibility modes for HSQLDB, MySQL and PostgreSQL
</li></ul>
<h3>
Security Features
</h3>
<ul>
<li>
User password authenticated uses SHA-256 and salt
<li>
Includes a solution for the SQL injection problem
</li><li>
User password authenticated uses SHA-256 and salt
</li><li>
User passwords are never transmitted in plain text over the network (even when using insecure connections)
</li><li>
All database files (including script files that can be used to backup data) can be encrypted using AES-256 and XTEA encryption algorithms
</li><li>
The remote JDBC driver supports TCP/IP connections over SSL/TLS
</li><li>
The built-in web server supports connections over SSL/TLS
</li><li>
Passwords can be sent to the database using char arrays instead of Strings
</li><li>
Includes a solution for the SQL injection problem
</li></ul>
<h3>
Other Features and Tools
</h3>
...
...
@@ -118,7 +118,7 @@ Features
<li>
Small footprint (smaller than 1 MB), low memory requirements
</li><li>
Multiple index types (b-tree, tree, hash, linear hash)
</li><li>
Support for multi-dimensional indexes
</li><li>
CSV file support
</li><li>
CSV
(comma separated values)
file support
</li><li>
Support for linked tables, and a built-in virtual 'range' table
</li><li>
EXPLAIN PLAN support, sophisticated trace options
</li><li>
Database closing can be delayed or disabled to improve the performance
...
...
This diff is collapsed.
Click to expand it.
h2/src/docsrc/html/history.html
浏览文件 @
806d03db
...
...
@@ -36,6 +36,15 @@ Hypersonic SQL or HSQLDB. H2 is built from scratch.
<h3>
Version 1.0 (Current)
</h3>
<h3>
Version 1.0 / 2007-TODO
</h3><ul>
<li>
Linked tables can now emit UPDATE statements if 'EMIT UPDATES' is specified in the CREATE LINKED
TABLE statement. So far, updating a row always deleted the old row and then inserted the new row.
</li><li>
In the last release, the H2 Console opened two connection when logging into a database,
and only closed one connection when logging out. Fixed.
</li><li>
New functions LEAST and GREATEST to get the smallest or largest value from a list.
</li>
</ul>
<h3>
Version 1.0 / 2007-04-29 (Build 46)
</h3><ul>
<li>
Unnamed private in-memory database (jdbc:h2:mem:) were not 'private' as documented. Fixed.
</li><li>
Autocomplete in the Console application: now the result frame scrolls to the top when the list is updated.
...
...
This diff is collapsed.
Click to expand it.
编写
预览
Markdown
格式
0%
重试
或
添加新文件
添加附件
取消
您添加了
0
人
到此讨论。请谨慎行事。
请先完成此评论的编辑!
取消
请
注册
或者
登录
后发表评论