SQL on Rietta Cybersecurity

Best Data Type to store Money in MySQL?

Tue, 04 Jun 2019 13:30:00 -0400

The Short Answer (TL;DR)

If GAAP Compliance is required or you need 4 decimal places:

DECIMAL(13, 4)

Which supports a max value of:

$999,999,999.9999

Otherwise, if 2 decimal places is enough:

DECIMAL(13,2)

Which supports a max value of:

$99,999,999,999.99

Storing currency in PostgreSQL

Mon, 28 Jan 2019 21:00:00 -0500

There are different ways we can store currency in PostgreSQL, this blog post will cover the money and numeric types.

Adding a Rake Task for SQL Views to a Rails Project

Mon, 30 Mar 2015 12:00:00 -0400

I have previously written about Using Rails and SQL Views for a Report. A practical consideration when employing SQL views, which create wonderfully fast read-only tables that can be used by ActiveRecord models seamlessly, in a Ruby on Rails project is where to maintain them in a project.

One approach is to use migrations, since that’s where database stuff normally goes. But a big downside is that this approach is not DRY because changing the SQL view requires a new migration that drops the old view and replaces it with the updated version. Simply changing a field in the SQL view requires copying and pasting the entire definition over again. That’s just annoying!

The second, and in my opinion better approach, is to treat SQL views more like models.

How to use SQL views to Build Reports with Ruby on Rails

Thu, 28 Nov 2013 10:54:00 +0000

SQL views are a powerful capability of a relational database server. This functionality can be easily used to implement important reporting, data mining, and other functionality to a web application built with Ruby on Rails in a manner that may be faster and more concise than an implementation that uses only typical ActiveRecord patterns. The complexity of dealing with the relational data is abstracted away from the Rails application that is a consumer of the data, keeping the model, controllers, and Rails view concisely focused on their appropriate roles.

Part I: Introduction to SQL Injection

Sat, 23 Apr 2005 00:00:00 +0000

This is Part I of a serialization of a paper I have written on the SQL Injection defenses. As portions of the paper are finished I will post them on this blog. Topics will include a discussion on access control, security models, classification of attacks, and intrusion detection techniques. SQL injection is a technique often used to exploit database systems through vulnerable web applications. The techniques allows the attacker to not only steal the entire contents of relational databases but also, in many cases, to make arbitrary changes to the both the database schema and contents.