https://takao.blog/zh/tags/database/Recent content in Database on Commentary of TakaoHugo -- gohugo.iozhCommentary of TakaoWed, 15 Jul 2026 22:01:08 +0900https://takao.blog/zh/web/backend-database-indexing-basics/Sun, 25 May 2025 00:00:00 +0900https://takao.blog/zh/web/backend-database-indexing-basics/<img src="https://takao.blog/img/thumbnail/backend-database-indexing-basics-zh.png" alt="Featured image of post 后端数据库索引基础" /><h2 id="introduction">Introduction </h2><p>As web applications scale and data volumes grow, backend systems often face database bottleneck issues like query latencies.</p> <p>Running join (<code>JOIN</code>) operations or complex search queries on tables with hundreds of thousands of records without proper index optimizations can cause database CPU spikes, leading to slow response times for end users.</p> <p>Designing database indices is a powerful way to address these performance bottlenecks. This article explains how database indices work, details B-Tree structures, and shares guidelines for designing effective indices.</p>https://takao.blog/zh/web/sql-injection-prevention/Tue, 01 Oct 2024 00:00:00 +0900https://takao.blog/zh/web/sql-injection-prevention/<img src="https://takao.blog/img/thumbnail/sql-injection-prevention-zh.png" alt="Featured image of post SQL注入预防：现代数据库安全指南" /><p>尽管人们已经意识到 SQL 注入数十年，但它仍然位居 OWASP 前 10 名之列。 2023 年至 2024 年期间，医疗保健、电子商务和政府部门发生了引人注目的涉及 SQLi 的违规事件。虽然经典的 <code>' OR 1=1 --</code> 攻击众所周知，但现代变体包括二阶注入、盲目 SQLi（基于时间和基于布尔）和带外渗漏。预防措施很容易理解，但由于遗留代码、ORM 滥用和测试自动化不足而执行不力。</p>