Re: WHERE 1=2 with performance nightmares



Craig Stuntz [TeamB] expressed precisely :
Kim Madsen wrote:

Usually the expression compiler will evaluate the expression to be
false, even before actually searching records.

I know that to be false for InterBase. I expect that to be true for
any DB server which doesn't actually explicitly check for such
conditions. It is, generally speaking, a bad idea.

The Interbase needs a fix. In a simple where condition, like CustomerId=5, the database knows it needs to search the CustomerId field looking for the value 5. It should resolve the phrase before the search begins. It needs to know what to search for before it actually searches. No?

In "1=2", what is Interbase looking for? A column named "1" with a value of "2"? I don't know the innards of Interbase, but if it is designed this way, it seems flawed.


.



Relevant Pages

  • Re: WHERE 1=2 with performance nightmares
    ... even before actually searching records. ... any DB server which doesn't actually explicitly check for such ... Delphi/InterBase Weblog: http://blogs.teamb.com/craigstuntz ... Want to help make Delphi and InterBase better? ...
    (borland.public.delphi.non-technical)
  • FreeBSD Ports Security Advisory FreeBSD-SA-01:26.interbase
    ... FreeBSD only: NO ... Interbase is a SQL database server from Borland. ... Remote attackers may connect to the database on TCP port ...
    (FreeBSD-Security)
  • Re: Oracle Innobase Purchase Impacts MySQL.
    ... Interbase has an MVCC paradigm. ... Oracle doesn't have. ... licensed or bought up for inclusion in, for example, SQL Server. ... Borland purchased Ashton-Tate. ...
    (comp.databases.oracle.server)
  • Re: Looking for old Interbase proof-of-concept exploit
    ... interbase dbas have upgraded interbase which claims to have fixed the ... Interbase requires that you create users with the Server ... I dont believe the console admin util allows account creation. ... > I was reading up on the old Interbase hardcoded backdoor and I'm not ...
    (Vuln-Dev)
  • Re: CreateDatabase
    ... the InterBase6 server interprets transition features just ... the InterBase server interprets transition features as ... Immerhin werden die Angaben richtig interpretiert; ... ich mich damit auch einloggen. ...
    (de.comp.lang.delphi.datenbanken)