Category: General news

We are starting series or mini-interviews with speakers of Firebird International Conference 2014. The first guest is Ann W. Harrison

Common steps in avoiding sql injections

1.First step is to sanitize the inputs and never trust what comes from POST/GET :

2.Another tip is to Always use prepared statements (in ibase) or PDO that is more safe (query stays unchaged while executing the php script) and the parameters will be the only changes in the queries (feed them from post/get) also casting the variables to int and string is a good way filtering is not enough, casting is better

3.Another posibility is using stored procedures were business rules are done inside firebird and you specify only the parameters (this way the query stays unmodified and the where clause can’t be changed by evil hackers)

Paul Vinkenoog cleaned up that page and wrote on Firebird-docs:

– On top are the most important version-specific docs for the currently supported versions, i.e. 2.5 and 2.1 Quick Start Guides and LangRef Updates.

– After that, the Command Line Utilities manuals, followed by other user manuals, reference material and the Firebird licenses.

– Then come the manuals on no longer supported versions, the IB6 manuals, and finally the manuals for Firebird docwriters.

I’m sure we can still do better, by integrating some of the docs pages and using only one line per document (with the available language links listed like we used to, e.g. “en fr de nl”), which saves a lot of vertical scrolling, but that’s for another day.

Cheers

ps: Thanks Lukas Eder for suggestions

I think it is time for updating the WordPress’s theme used in FirebirdNews. The actual theme is based in the Firefox theme (old and no more maintained) and doesn’t support well some of the new features available in the most recent versions of WordPress.

WordPress has thousands of themes, and choosing the right one is a difficult task, when so many choices are available. So, if you know a good and beautiful theme that could be used in this site, please comment below.

Remember that we are a news site, so theme should fit this purpose. Also, it should has no cost (meaning it should be free or donated)

Mark Rotteveel tweeted about his progress towards using JNA instead of JNI:

Continuing my adventure with JNA for Firebird native client and embedded support in Jaybird 3.0, so I can remove existing JNI wrapper.

Github model for contributions really works : here is the project pulse for last month.

There are quite a few pull requests closed and merged for .NET Provider

FreeBSD port is updated to Firebird 2.5.3 . Please consult the release notes

ps: Unicode patch is not needed anymore (Fix included in 2.5.3 release)

pyfirebirdsql Version 0.9.4 is released
with following changes:

• – Fixed Cursor.rowcount.
• – Cursor.callproc() return out parameters.
• – Cursor.execute() return cursor instance itself.

You can consult the Commit History