Unsupported Screen Size: The viewport size is too small for the theme to render properly.

Help with database plz

  • This topic is empty.
Viewing 5 reply threads
  • Author
    Posts
    • #8479
      Sw0rdD
      Member

      G'day,

      I am new to all this, and I have 2 questions to see if SQLyog is the right tool for me:

      Some schools offer online checking for the students exam results. A student or a parent enters a seating number, and the student's results appear after one clicks a button.

      1. How does that happen? How can one simply put a database online to be accessed by entering certain numbers, to exhibit certain details? [sorry for the newbie question]

      2. Is there a way to download the whole database to be accessed offline? What are the progs I need? Is SQLyog one of them?

      Thanks in advance.

    • #16011
      Shadow
      Member

      SQLyog can be used to sync a remote database to a local one, provided the db is a MySql. So far, so good. The problem is your purpose: I belive you want to fetch all students' exam data from a given school trough Internet. I don't think it is possible.

      Even if the db is MySql, the operators must have implemented security measures to prevent unauthorized access to their db from Internet. Unless you are one of the operators (I susprct that this is not the case), you must not have direct access to this db. I would say that even the operators should not have…

      The contents of this db is surely accessed through a web app that runs locally on their server (to your question No. 2). Of course, you may ask the operators to grant you direct access needed by SQLyog, but I don't think you'll get it.

      Sure, you may find ways and tools in the Internet that may help you to access this db despite all restrictions, but not in this forum.

    • #16012
      Sw0rdD
      Member

      Thanks a lot, Shadow for your reply,

      What I don't understand is: If I can access the database using a certain seating number, this appears to me to be a public service; I can add and subtract numbers from the seating number I have to get as many resutls as I can. But this is so boring, and dull process.

      Why can't I likewise, get the whole thing? If I have access to a part, doesn't that mean I can get the whole lot?

      Another thing, How can I know what type of database the remote server has?

      A third and final thing: Regarding the progs and ways of getting to the database, is that “hacking the database”? If it is, I am not after that. I want to get what is already offered to everyone, legally. I just want to get something more inclusive.

      Thanks again in advance.

      Sw0rdD

    • #16013
      Shadow
      Member
      Quote:
      Why can't I likewise, get the whole thing? If I have access to a part, doesn't that mean I can get the whole lot?

      Because the whole app was designed solely to allow the retrival of specific information. The design of the app is incorrect if it lets you query data regarding other students. Correct me if I'm wrong, but exam results and educational advancement is personal data! At least, I don't really want anyone else to access those data… Isay, it's a huge flaw in the program design and the operators should be notified of the possible consequences.

      Quote:
      Another thing, How can I know what type of database the remote server has?

      If the app is correctly designed (which is not), then it's difficult – unless it boasts the fact that it is powered by such and such db or portal engine. In case of a portal engine, you have to find out which dbs may be used with the engine.

      Otherwise you may try to feed incorrect data to the app and see if the error is handled correctly. Let's say, the seating number is a true number such as 123. Submit 'abc' instead ('abc' cannot be converted to a number). If the app does not have proper error handling then you may receive an error message complaining about a data type mismatch. Such error messages usually contain the type of the db.

      Quote:
      Regarding the progs and ways of getting to the database, is that “hacking the database”?

      Exactly.

      I suggest you to contact the operators because if the service is abolutely public and there is no restriction on accessing all data, then they may grant you full access to the db or hand over a snapshot of the db. Of course, you may have to come up with a convincing cause for such a request…

    • #16014
      Sw0rdD
      Member

      Thanks a lot for all this help

    • #16015
      Shadow
      Member

      🙄

Viewing 5 reply threads
  • You must be logged in to reply to this topic.