Re: [Firebird-devel] Some aspects of the optimizer hints

2014-01-08 Thread Alex
On 01/07/2014 01:35 PM, Dmitry Yemanov wrote: > 07.01.2014 12:46, Dmitry Yemanov wrote: >> It *is* related as soon as you need to alter from the default FIRST ROWS >> to custom FIRST ROWS in some particular query. > Read: "custom ALL ROWS", sorry. > > True. I.e. historical form of giving 'FIRST' -

Re: [Firebird-devel] Odp: Some aspects of the optimizer hints

2014-01-08 Thread Kjell Rilbe
Den 2014-01-08 08:22 skrev Dmitry Yemanov såhär: > 08.01.2014 10:30, liviusliv...@poczta.onet.pl wrote: > >> Why plan can not by extended for hint purposes? > It can, the question is whether it should. > >> This is natural placefor FB users to tell optimizer >> the better way of query execution. >

Re: [Firebird-devel] Odp: Some aspects of the optimizer hints

2014-01-08 Thread Dmitry Yemanov
08.01.2014 12:15, Kjell Rilbe wrote: > That said, I'd vote against "plan for/hint" if the plan clause in its > current use is or is soon going to be deprecated. So, what are the plans > for the plan clause? Explicit planning is still used by some customers, so it cannot be deprecated. But it's n

Re: [Firebird-devel] Odp: Some aspects of the optimizer hints

2014-01-08 Thread Kjell Rilbe
Den 2014-01-08 09:32 skrev Dmitry Yemanov såhär: > 08.01.2014 12:15, Kjell Rilbe wrote: > >> That said, I'd vote against "plan for/hint" if the plan clause in its >> current use is or is soon going to be deprecated. So, what are the plans >> for the plan clause? > Explicit planning is still used by

[Firebird-devel] [FB-Tracker] Created: (CORE-4314) COLLATION UNICODE_CI_AI for CHARACTER SET UTF8 is not installed

2014-01-08 Thread Kaf (JIRA)
COLLATION UNICODE_CI_AI for CHARACTER SET UTF8 is not installed --- Key: CORE-4314 URL: http://tracker.firebirdsql.org/browse/CORE-4314 Project: Firebird Core Issue Type: Bug

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Alex
On 01/07/2014 01:11 PM, marius adrian popa wrote: > Notes on database security assesment > http://www.slideshare.net/qqlan/firebird-interbase-database-engine-hacks-or-rtfm > I see 2 kinds of samples - mixed DDL/DML statements and use of UDF. It's well known and documented (can't provide a link bu

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Mark Rotteveel
On Wed, 08 Jan 2014 19:13:02 +0400, Alex wrote: > On 01/07/2014 01:11 PM, marius adrian popa wrote: >> Notes on database security assesment >> http://www.slideshare.net/qqlan/firebird-interbase-database-engine-hacks-or-rtfm >> > > I see 2 kinds of samples - mixed DDL/DML statements and use of UDF

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Alex
On 01/08/2014 07:22 PM, Sergey Mereutsa wrote: > Hello Alex, > > ... skipped ... > > A> I.e. on my mind the presentation is about nothing. > > The presentation is about "If you have armed gun - you can shut your > leg" :) > > I think, the main message idea from Marius is about default security - >

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Alex
On 01/08/2014 07:34 PM, Mark Rotteveel wrote: > On Wed, 08 Jan 2014 19:13:02 +0400, Alex wrote: >> On 01/07/2014 01:11 PM, marius adrian popa wrote: >>> Notes on database security assesment >>> > http://www.slideshare.net/qqlan/firebird-interbase-database-engine-hacks-or-rtfm >> I see 2 kinds of s

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Mark Rotteveel
On Wed, 08 Jan 2014 19:41:16 +0400, Alex wrote: > On 01/08/2014 07:22 PM, Sergey Mereutsa wrote: >> Hello Alex, >> >> ... skipped ... >> >> A> I.e. on my mind the presentation is about nothing. >> >> The presentation is about "If you have armed gun - you can shut your >> leg" :) >> >> I think, the

Re: [Firebird-devel] Some aspects of the optimizer hints

2014-01-08 Thread Jim Starkey
On 1/7/2014 3:45 PM, Mark Rotteveel wrote: > The fact that the optimizer will (or should) optimize it in a specific > way does not mean you should abuse also it to get the optimizer to use > a specific optimization. It can lead to hard to find bugs in the > future, for example if you used SELEC

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Dimitry Sibiryakov
08.01.2014 16:44, Mark Rotteveel wrote: > He simply demonstrates that once you 'own' a Firebird server, you can use > that to further exploit/hack into a server. Perhaps, it is time to change default for DatabaseAccess parameter... -- WBR, SD. -

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Sergey Mereutsa
Hello Alex, A> But all samples provided _do_ require privileged user (sysdba or root) - A> may be except A> CREATE DATABASE ':'; A> Currently everyone can create new DB and become it's DBO. A> That's what will be changed in fb3 before beta1. It is true only if server itself has access to the thi

Re: [Firebird-devel] Firebird Interbase Database engine hacks or rtfm

2014-01-08 Thread Sergey Mereutsa
Hello Alex, ... skipped ... A> I.e. on my mind the presentation is about nothing. The presentation is about "If you have armed gun - you can shut your leg" :) I think, the main message idea from Marius is about default security - i.e. by default FB after installation should not allow _unprivile

Re: [Firebird-devel] Some aspects of the optimizer hints

2014-01-08 Thread Ann Harrison
On Tue, Jan 7, 2014 at 3:45 PM, Mark Rotteveel wrote: > > With the SQL Server syntax optimizing for retrieval of the first 150 > rows is done with: > > SELECT ... > FROM someTable > ... > OPTION (FAST 150) > > It also contains an interesting option (OPTIMIZE FOR) for 'helping' the > optimizer dec