Well thought out but poorly executed

Showcase, discuss, and inspire with creative America Data Set.
Post Reply
Mitu9900
Posts: 223
Joined: Thu Dec 26, 2024 9:17 am

Well thought out but poorly executed

Post by Mitu9900 »

Particularly difficult to find are errors that cannot be recognized as such by the system and therefore do not generate any log entries or error messages. If the syntax of a command is not incorrect, the program execution is not interrupted. If all the requested resources are available as desired, exactly what the developer has coded is executed. As absolute classics in this area, implicit conversions and order of operations have fought their way to the top of my list of suspects.


Many developers do not know or do not pay attention to the fact that a DBMS, for example, does not insist on type equality in many places in favor of usability/convenience. The example on the left above is misjudged in almost every session in which I teach interested people these finer points. At afghanistan telegram screening least 90 percent of participants guess "5" as the result output of the SELECTS , since the condition 1= 0 is never true and therefore the ELSE branch of the condition is executed. However, they forget the implicit type conversion to a date type that the SQL Server executes here. This also applies to the example on the right. In addition, the data type DateTime (for the GetDate ) is given higher priority than the numeric value 5 - even though the ELSE branch is not executed in this example. The result for both examples is therefore 1900-01-06 00:00:00.000 - try it out for yourself!

The truth is on the pitch
This football saying can be applied one-to-one to the database world. No matter how creative the obfuscation tactics, the solution can definitely be found in the source code. However, the searcher needs a strong basic understanding of the database world and the willingness to understand the creative ideas of the other side, whether they came into the project consciously or accidentally. If you know where to find information in the system, you don't have to rely on tools that are easy to manipulate - you can get your data directly from the source, unadulterated.
Post Reply