SQL Injection scanners

Here's a list of the free sql injection tools over on security-hacks.

Releases

In the last week, the team has released 3 times.

1) SQL Developer 1.1.3 was released
2) Jdev 11 Preview was released where sqldev is built in
3) SQL Developer Migrations EA #2 was minutes ago posted. If your running 1.1.3, you'll see the update balloon soon.


However, I looked up some stats on usage and the majority of people are using 1.0.0 which was release March 2006. Here's the release notes for 1.1.3 so you can see what your missing.

Process a zip file

Some one on the forum asked for an example of how to bulk upload files. Here is an example I used a couple years ago of processing a zip file and uploading the individual files into a table. Then we made an application to manage the file and followed "Create a Procedure to Download Documents" to download.

Here's the sql for the table and sequence:

create table docs(doc_id number,blob_content blob,file_name varchar2(2000));

create sequence doc_id_seq;

New patch with APEX features

I just pushed sqldeveloper 1.1.3. There's about 200 bug fixes in this build some more visible ones are here. There are a couple new things like a couple more sqlplus command supported , print , accept. The other thing that you will notice is new reports.


Mike Hichwa added some reports for Application Express. So now you can easily see the applications you have access to and some details about them.




The best thing about these reports is that Mike added them using nothing more than the report dialogs. The only thing that was manually added was the check for version of apex and that was just editing the xml file.

Here's what the Applications report looks like.



Here's another that let's you see the images the workspace.



The only down side is that APEX 3.0.1 is required and it hasn't been released yet.

csv with sqldeveloper

Laurent shows how to format a select * into csv.


Give this a try in sqldeveloper, simply add a comment in the select and it's csv. See this: