Need help understanding the results of security analysis.
My agency has recently started using tool to fortify scanner of HP, which aims to analyze the code of the CF directly, rather than the rendered page. The scanner always seems to mark our pages for some error when I use the following code (used to create a PDF file on the fly):
<cfheader name="Content-Disposition" value="attachment;filename=#pdffile#">
<cfcontent type="application/octet-stream" file="#expandPath('.')#\#pdffile#" deletefile="Yes">
01. is line 299 in my code.
I'm basically generates a name of file elsewhere on the page that is based on what a user is requested, then using the code above to create a downloadable PDF of this file.
The error is:
Manipulation of the header (validating input and representation, stream)
The myfile.cfm file includes data not validated in a 299 online HTTP response header. This allows attacks such as the poisoning of the cache, cross-site scripting, cross-user daub, hijacking the page, cookie or open redirect handling.
I think it is one of two potential problems.
- ExpandPath() is exploitable
- The scanner is programmed to any variable passed to a Pavilion cfheader tag.
Any thoughts?
You need to scope the variable pdffile. Without a specific scope, it could be overwritten by URL or form variables entrants. I would try that and then re-run the analysis.
HTH,
-Dave
Tags: ColdFusion
Similar Questions
-
Need help understanding checksur results!
I downloaded System Update Readiness Tool and looked at my results and he said that he found 8 errors and has listed them under "unavailable repair files." How can I fix it! Here are my results... Help, please! I use a windows vista Home premium sp2 64-bit
Preparation of control system was updated.
Binary version 6.0.6002.22574
Version of the package 15.0
2012-09-14 22:59Checking Windows Service Packages
Checking of manifests package and catalogs
Checking package Watchlist
Watchlist checking
Checking packages
Control components store
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.22514_en - us_e1fd3ac7506c5922.manifest amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.22514_en - us_e1fd3ac7506c5922
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.22787_none_71a01ccedb47a1b6.manifest amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.22787_none_71a01ccedb47a1b6
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.18547_none_7141bdcdc2099501.manifest amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.18547_none_7141bdcdc2099501
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.18547_en - us_df6fb9623a3e09be.manifest amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.18547_en - us_df6fb9623a3e09be
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.22787_en - us_dfce1863537c1673.manifest amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.22787_en - us_dfce1863537c1673
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.18336_en - us_e15ffcd2375d26c1.manifest amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.18336_en - us_e15ffcd2375d26c1
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.18336_none_7332013dbf28b204.manifest amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.18336_none_7332013dbf28b204
(f) CSI shows all zeros 0 x 00000000 winsxs\Manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.22514_none_73cf3f32d837e465.manifest amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.22514_none_73cf3f32d837e465Summary:
Seconds executed: 1406
Found 8 errors
County CSI shows all zeros Total: 8Unavailable repair files:
winsxs\manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.22514_en - us_e1fd3ac7506c5922.manifest
winsxs\manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.22787_none_71a01ccedb47a1b6.manifest
winsxs\manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6001.18547_none_7141bdcdc2099501.manifest
winsxs\manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.18547_en - us_df6fb9623a3e09be.manifest
winsxs\manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6001.22787_en - us_dfce1863537c1673.manifest
winsxs\manifests\amd64_microsoft-windows-i... TimeZones.resources_31bf3856ad364e35_6.0.6002.18336_en - us_e15ffcd2375d26c1.manifest
winsxs\manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.18336_none_7332013dbf28b204.manifest
winsxs\manifests\amd64_microsoft-windows-i... Intern - timezones_31bf3856ad364e35_6.0.6002.22514_none_73cf3f32d837e465.manifestCustomer experience report downloaded successfully. Thank you for your participation. For more information, see the Microsoft Customer Experience Improvement Program on the Microsoft web site.
Hello
Check out these links:How to fix the errors found in the CheckSUR.log:
http://support.Microsoft.com/kb/2700601Note: This is applicable to Windows Vista also.Guidelines for diagnosing and servicing of fixing corruption:
http://TechNet.Microsoft.com/en-us/library/ee619779 (v = ws.10) .aspxI hope this helps! -
Need help on the results of a bizarre query...
Hi guys,.
I need your help
Requirement is:-suppose we have under titles in a single table;
HULK
THE INCREDIBLE HULK - 2001 (DO NOT USE)
INVERSE OF HULK
INCREDIBLE HULK U/A
BRING ME THE HEAD OF THE INCREDIBLE HULK
JENNIFER JASON LEIGH, HULK HOGAN
HULK 2
BRIDE OF THE INCREDIBLE HULK
HULK HOGAN, DAVID WILLEY, NATASHA BEDINGFIELD
THE INCREDIBLE HULK #03 (1979/80)
HULK HOGAN CELEBRITY CHAMPIONSHIP WRESTLING #01 (2008/09)
Now, he must: -.
O/p should be below order without duplicate records
HULK first, then
HULK then %
HULK %.
O/p: -.
HULK
HULK 2
HULK HOGAN, DAVID WILLEY, NATASHA BEDINGFIELD
HULK HOGAN CELEBRITY CHAMPIONSHIP WRESTLING #01 (2008/09)
THE INCREDIBLE HULK - 2001 (DO NOT USE)
INVERSE OF HULK
INCREDIBLE HULK U/A
BRING ME THE HEAD OF THE INCREDIBLE HULK
JENNIFER JASON LEIGH, HULK HOGAN
BRIDE OF THE INCREDIBLE HULK
THE INCREDIBLE HULK #03 (1979/80)
How can do us using sql query? Is it possible to make a request?
Or to do table PL/SQL etc.?
There should be no duplicates if you use more than a query or a single query.
Can you help me?tappusingh wrote:
O/p should be below order without duplicate records
HULK first, then
HULK then %
HULK %.
Maybe something like:
SQL> WITH test_tab 2 AS (SELECT 'HULK' col FROM DUAL 3 UNION ALL 4 SELECT 'THE INCREDIBLE HULK - 2001 (DO NOT USE)' FROM DUAL 5 UNION ALL 6 SELECT 'REVERSE HULK' FROM DUAL 7 UNION ALL 8 SELECT 'INCREDIBLE HULK U/A' FROM DUAL 9 UNION ALL 10 SELECT 'BRING ME HEAD OF THE HULK' FROM DUAL 11 UNION ALL 12 SELECT 'JENNIFER JASON LEIGH, HULK HOGAN' FROM DUAL 13 UNION ALL 14 SELECT 'HULK 2' FROM DUAL 15 UNION ALL 16 SELECT 'BRIDE OF THE INCREDIBLE HULK' FROM DUAL 17 UNION ALL 18 SELECT 'HULK HOGAN, DAVID WILLEY, NATASHA BEDINGFIELD' FROM DUAL 19 UNION ALL 20 SELECT 'INCREDIBLE HULK #03 (1979/80)' FROM DUAL 21 UNION ALL 22 SELECT 'HULK HOGAN''S CELEBRITY CHAMPIONSHIP WRESTLING #01 (2008/09)' 23 FROM DUAL) 24 -- " end of test data " 25 SELECT DISTINCT col 26 FROM test_tab 27 ORDER BY CASE 28 WHEN col = 'HULK' THEN 1 29 WHEN col LIKE 'HULK%' THEN 2 30 WHEN col LIKE '%HULK%' THEN 3 31 ELSE 4 32 END, col 33 / COL ----------------------------------------------------------- HULK HULK 2 HULK HOGAN'S CELEBRITY CHAMPIONSHIP WRESTLING #01 (2008/09) HULK HOGAN, DAVID WILLEY, NATASHA BEDINGFIELD BRIDE OF THE INCREDIBLE HULK BRING ME HEAD OF THE HULK INCREDIBLE HULK #03 (1979/80) INCREDIBLE HULK U/A JENNIFER JASON LEIGH, HULK HOGAN REVERSE HULK THE INCREDIBLE HULK - 2001 (DO NOT USE) 11 rows selected. SQL>Kind regards
JO -
Pavilion Elite HPE-170 t: need help with the result of a command prompt to Power Options
I have recently upgraded to Windows 10 in Windows 7. Like so many thousands of people, I problelms of sleep mode. Mine will not be auto-sleep. It has been suggested that I saw to run command prompt: powercfg-applications
It supposedly will list the items running on your computer which can now be auto-sleep to work. I tried several times and up to now, I get the same item displayed each time. This is what is displayed: \device\harddiskvolume2\windows\sysWOW64\svchost.exe (hpqddsvc) is followed by this message: a file delete operation is underway
My first thought is that if there is an operation to remove file in progress all the time, it's maybe the reason why my computer is not auto-sleep. If there is someone out there who can shed some light on this situation, I would appreciate the help.
EUREKA * SOLVED
I found the answer to my problem! After using the control system: powercfg-query and get the answer: \device\harddiskvolume2\windows\sysWOW64\svchost.exe (hpqddsvc) delete file operation is in progress
I started looking for whatever it is associated with the answer above. In the Manager of tasks in respect of the services, I found the name of the file hpqddsvc, with a description of HP CUE DeviceDiscovery Service was running. When I stopped the task and re-tried in opt power standby mode, it worked correctly. In the Configuration of the system (by typing msconfig at the run prompt) on the Services tab, I unchecked the box for HP CUE DeviceDiscovery Service and rebooted the computer. The service is no longer running.
I'm sure that this Service has been added to my computer when I downloaded the hp.com/support product detection tool . The tool scans your computer to detect and identify HP products.
This can be useful to others who have the problem of the auto-sleep I've had.
-
Need help with the button mute on my helmet XL-3000 of Microsoft Chat, please!
Hi all! Hope everyone is having a good TGIF! If you use my helmet even, I need help understanding the region button mute in the middle of the rope. The red light is on or off? I suppose that if I hit the curve button with the microphone on this subject, and the red light, I'm turn off my mike?
I did some tests with others on the phone calls. Sometimes, some other hear me, sometimes they do not have. BUT I NEVER HEAR THEM! FOR MY WORK, IT IS IMPERATIVE THAT I MAKE CALLS TO OTHERS! HELP PLZ! Thank you very much and have a great wkend!
Hello
Please follow the links below to troubleshoot the computer.
Method 1
Connect one microphone, music player or other audio device to your computer
Method 2
Step 1
Troubleshooting: headsets
Step 2
Open the troubleshooting of Audio recording
Method 3
How to adjust the microphone volume
a. click Start, type mmsys.cpl in the search box and press ENTER.
b. in the sound dialog box, click the recording tab.
c. click Microphone, and then click Properties.
Note Make sure that the work appears under Microphone. If the job does not appear, click Microphone, and then click on set as default.
d. the Microphone Properties dialog box, click the custom tab.
e. select or clear the box amp Microphone.
f. click the levels tab.
g. set the volume to the desired level, and then click OK.
h. click OK to close the sound dialog box.How to adjust the setting of the voicea. start the game.
b. connect to LIVE (the Guide).
c. click personal settings.
d. click on voice.
e. make sure that the recording volume level indicator records at a bar when you talk.
f. click done.If you are still facing problems then, I would say that you contact support for Microsoft hardware for more direct intervention.
I hope this helps.
-
Need help with the presentation of the trace file
Hello
I need to understand
-the large number of fetch for the query
-SQL * Net message to client and SQL * Net message from the clientbeing even
-locking: cache buffers chains
The question I have is a delay of 6 x for some reason.
Can someone help me?
Thank you
D
-----
SQL
SELECT R_RO.*
Of
(SELECT b.ID, b.ANSWERS, b.C_CLASSID, b.C_ID, b.FCI, b.FROM_ID, b.TCI, b.TO_ID, b.FFU, b.TFU, b.NOU, b.ISN, b.SC_NAME,
b.DN_NAME, b.DN_ITEM_NUMBER, b.ISC, priority of THE VVP. B RELATIONSHIP WHERE b.ID NOT IN (SELECT / * + HASH_AJ * / SDE_DELETES_ROW_ID OF VVP.) D94 WHERE DELETED_AT IN (SELECT l.lineage_id FROM SDE.state_lineages WHERE l.lineage_name = l: source_lineage_name AND l.lineage_id < =: source_state_id) AND SDE_STATE_ID
=: 'SYS_B_0') UNION ALL SELECT a.ID, a.ANSWERS, a.C_CLASSID, a.C_ID, a.FCI, a.FROM_ID, a.TCI, a.TO_ID, a.FFU, a.TFU, a.NOU, a.ISN, a.SC_NAME, a.DN_NAME, a.DN_ITEM_NUMBER, a.ISC, a.PRIORITY IN THE PSV. A94 has, SL SDE.state_lineages WHERE (a.ID, a.SDE_STATE_ID) NOT IN (SELECT / * + HASH_AJ * / SDE_DELETES_ROW_ID, SDE_STATE_ID OF VVP.) D94 WHERE DELETED_AT IN (SELECT l.lineage_id FROM SDE.state_lineages WHERE l.lineage_name = l: source_lineage_name AND l.lineage_id < =: source_state_id) AND SDE_STATE_ID >: 'SYS_B_1') AND a.SDE_STATE_ID = SL.lineage_id AND SL.lineage_name =: source_lineage_name AND SL.lineage_id < =: source_state_id) R_RO WHERE (ID =: "SYS_B_2")
-----
call the query of disc elapsed to cpu count current lines
-----
Parse 3911 2.30 2.14 0 0 0 0
Run 3911 2.47 2.43 0 0 0 0
Search 3911 268.96 270,60 28 15696558 0 3911
Total 11733 273.73 275,18 28 15696558 0 3911
Chess in the library during parsing cache: 1
Optimizer mode: FIRST_ROWS
The analysis of the user id: 1031
Rows Row Source operation
-----
1 VIEW (cr = 3966 pr = 0 pw = time 0 = 84973 US)
1 UNION ALL (cr = 3966 pr = 0 pw = time 0 = 84968 US)
1 ANTI-HASH JOIN (cr = 3963 pr = 0 pw = time 0 = 84707 US)
1 TABLE ACCESS BY INDEX ROWID CONNECTION (cr = 4 pr = 0 pw = time 0 = 123 en)
1 INDEX SCAN SINGLE R94_SDE_ROWID_UK (cr = 3 pr = 0 pw = time 0 = 88)(object id 7404) US
VW_NSO_2 VIEW 8586 (cr = 3959 pr = 0 pw = time 0 = 112274 en)
8586 NESTED LOOPS (cr = 3959 pr = 0 pw = time 0 = 103686 US)
3661 INDEX RANGE SCAN LINEAGES_PK (cr = 7 pr = 0 pw = time 0 = 67)(object id 307740) US
8586 D94_PK1 INDEX RANGE SCAN (cr = 3952 pr = 0 pw = time = 0 70624 US)(object id 1637355)
0 ANTI-HASH JOIN (cr = 3 pr = 0 pw = time 0 = 248-en)
0 NESTED LOOPS (cr = 3 pr = 0 pw = time 0 = 71 US)
0 TABLE ACCESS BY INDEX ROWID A94 (cr = 3 pr = 0 pw = time 0 = 68 fr)
0 A94_ROWID_IX1 INDEX RANGE SCAN (cr = 3 pr = 0 pw = time 0 = 65 US)(object id 129281)
0 INDEX UNIQUE SCAN LINEAGES_PK (cr = 0 pr = 0 pw = time 0 = 0 US)(object id 307740)
0 REVIEWS VW_NSO_1 (cr = 0 pr = 0 pw = time 0 = 0 US)
0 NESTED LOOPS (pr = 0 pw = time cr = 0 0 = 0 US)
0 D94_PK1 INDEX RANGE SCAN (pr = 0 pw = time cr = 0 0 = 0 US)(object id 1637355)
0 INDEX UNIQUE SCAN LINEAGES_PK (cr = 0 pr = 0 pw = time 0 = 0 US)(object id 307740)
Elapsed time are waiting on the following events:
Event waited on times max wait for the Total WHEREAS
SQL * Net message to client 3911 0.00 0.00
SQL * Net client message 3911 72,42 0.49
latch: cache buffers chains 1434 0.07 0.00
latch: shared pool 1 0.00 0.00
DB file sequential read 28 0.31 0.14
free latch 15 0.04 0.02
latch: cache line items 1 0.00 0.00
Journal of end of file switch 4 0.98 1.64ssddgreg wrote:
Hi Julie,.Thank you for your excellent performance! I have the DBMS Oracle 10.2.0.3 Ent edition deployed on Sun Solaris (64-bit), FIRST_ROWS and CURSOR_SHARING = SIMILAR.
I also checked the D94 table. SDE_DELETES_ROW_ID on the index, there are 3 indexes on the same column:
D94_IX1, NON-UNIQUE
D94_IX2, UNIQUE
D94_PK1, UNIQUEThis table is a system of another application of intermediate layer, and all the DXX tables are set up like that.
Is it a seller third-party application that you have no control over the schema? Because your description of the indices look like a potential case of massive too indexing, increasing the workload required to keep all this index. Most likely some of these indices are redundant and could be covered by a less index number.
Not to mention that my comment about the execution plan was probably not clear enough - I mean, it's the HASH_AJ trick prevents the optimizer to do clever things with predicates that I described.
So basically, the question is: what execution plan that you get if you omit the HASH_AJ advice? And how much compliance requires this new plan at run time? You may need to add a NL_AJ key instead to get what I have just described, but it would be interesting to see, in the first place, what execution plan is generated without any evidence.
A few other comments:
First_rows optimizer mode: this application allows you to use the optimizer mode FIRST_ROWS requires? Because in principle, if you have an application that actually retrieves most of the time only the first rows of a result like set, then you should use (n) FIRST_ROWS optimizer mode instead. FIRST_ROWS optimizer mode is obsolete since Oracle 9i, if I remember correctly, and has strange side effects on implementation plans, especially if the SQL contains an ORDER BY clause.
If your application usually treats all rows in a particular result set, default optimizer mode ALL_ROWS is more appropriate - using FIRST_ROWS as a band-aid because with ALL_ROWS things are slower only shows that there is something wrong that must be treated in a different way (by investigating why the ALL_ROWS mode can't seem to appropriate as the first activity execution plan).
CURSOR_SHARING = SIMILAR: CURSOR_SHARING = SIMILAR Note has some other effects secondary (and bugs). Oracle recently announced on My Oracle Support (see document 1169017.1) CURSOR_SHARING = SIMILAR will be deprecated (no longer supported) in Oracle 12. See this note for a description why this setting can be problematic.
Of course, if you have no control over a provider application and it works very well and has been optimized for these parameters (FIRST_ROWS CURSOR_SHARING = SIMILAR) then there not much you can do (or do) on this subject.
Kind regards
RandolfOracle related blog stuff:
http://Oracle-Randolf.blogspot.com/Co-author of the book "OakTable Expert Oracle practices":
http://www.Apress.com/Book/view/1430226684
http://www.Amazon.com/Expert-Oracle-practices-database-administration/DP/1430226684 -
Need help in the interpretation of a file of Trace 10053
Hello
I need help to interpret an event 10053 (optimizer Trace) trace file
Everything that happens on AIX with Oracle 11.2.0.2
It is not obvious to me why the optimizer chooses the path with the highest cost.
But I found the following quote in the trace file, which is probably the answer, but I did not understand what circumstances allow the optimizer to say such things:
New AP rejected: guess used for New, but not for the current best
So, it was the short story, now the witch for a long time one quote of the trace file
Here the query directly in the trace file. I can't modify this query, even a hint is not feasible, so I need to understand the incorrect path to avoid it.
And here's the strange part.************************** Automatic degree of parallelism (ADOP) ************************** Automatic degree of parallelism is disabled: Parameter. PM: Considering predicate move-around in query block SEL$1 (#0) ************************** Predicate Move-Around (PM) ************************** OPTIMIZER INFORMATION ****************************************** ----- Current SQL Statement for this session (sql_id=0zdbb3hzztdaf) ----- explain plan for SELECT aktl_aend, aktl_akgrnr, aktl_akgrpos, aktl_akh, aktl_alterart, aktl_anz_in, aktl_anz_nach, aktl_artrab, aktl_beg, aktl_belart1, aktl_belart2, aktl_belnr1, aktl_belnr2, aktl_bestkz, aktl_bestmg1, aktl_bestmg1_alt, aktl_bestmg2, aktl_bestmg2_alt, aktl_eindat, aktl_ek, aktl_ekdat1, aktl_ekdat2, aktl_ekkopie, aktl_ekn, aktl_eknorm, aktl_ek_alt, aktl_end, aktl_fbdarst, aktl_fbd_alt, aktl_fbseite, aktl_fbs_alt, aktl_fbtxt, aktl_info_werbeabt, aktl_info_wgm, aktl_kaek, aktl_kaekn, aktl_kaek_alt, aktl_kombiart, aktl_ldat1, aktl_ldat2, aktl_lf, aktl_lf_alt, aktl_mgfk, aktl_mg_p, aktl_mg_r, aktl_mindmg, aktl_neudat, aktl_nnek, aktl_nnekn, aktl_pabw, aktl_pic, aktl_plan_menge, aktl_plan_menge_hela, aktl_plan_stueck, aktl_plan_stueck_hela, aktl_plan_woche, aktl_plan_woche_hela, aktl_rdat, aktl_ro_p, aktl_ro_r, aktl_seite, aktl_sigkz, aktl_sokoeur, aktl_sokoeur_alt, aktl_sokopr, aktl_sokopr_alt, aktl_sort_vorab, aktl_stat, aktl_text, aktl_txtbau, aktl_txtbaukz, aktl_um_p, aktl_um_r, aktl_user, aktl_vk, aktl_vkn, aktl_vk_alt, aktl_zen, akt_at_at_no, akt_at_at_se_se_ag_ag_no, akt_at_at_se_se_ag_ag_wg, akt_at_at_se_se_no, ROWID, rownum, uid, USER, vid FROM akt WHERE ( aktl_stat <> :"SYS_B_0" ) AND ( aktl_zen = :"SYS_B_1" ) AND ( aktl_akh BETWEEN :"SYS_B_2" AND :"SYS_B_3" AND ( ( akt_at_at_se_se_ag_ag_wg = :"SYS_B_4" AND akt_at_at_se_se_ag_ag_no = :"SYS_B_5" ) ) ) ORDER BY akt_at_at_se_se_ag_ag_wg ASC, akt_at_at_se_se_ag_ag_no ASC, aktl_akh ASC, aktl_akgrnr ASC, aktl_akgrpos ASC, aktl_kombiart ASC, akt_at_at_se_se_no ASC, akt_at_at_no ASC *******************************************
As far as I know, in this quotation that the optimizer realizes, that there is a better path than the AKT_INDEX, but he ignores it.
So my question, of course, why not make the path through FK_AKH_AKTL_AKH?*************************************** BASE STATISTICAL INFORMATION *********************** Table Stats:: Table: AKT Alias: AKT #Rows: 14006583 #Blks: 477882 AvgRowLen: 281.00 ChainCnt: 570341.00 Index Stats:: Index: AKTL_UMNUM Col#: 44 LVLS: 2 #LB: 60137 #DK: 64171 LB/K: 1.00 DB/K: 179.00 CLUF: 11535830.00 Index: AKT_INDEX Col#: 2 3 4 5 1 6 LVLS: 3 #LB: 83897 #DK: 13955093 LB/K: 1.00 DB/K: 1.00 CLUF: 11889950.00 Index: AKT_INDEX010 Col#: 54 56 LVLS: 2 #LB: 37453 #DK: 392568 LB/K: 1.00 DB/K: 5.00 CLUF: 1127943.00 Index: AKT_INDEX011 Col#: 55 57 LVLS: 2 #LB: 33967 #DK: 2102 LB/K: 65.00 DB/K: 869.00 CLUF: 449507.00 Index: AKT_INDEX012 Col#: 2 3 4 5 6 LVLS: 2 #LB: 66503 #DK: 2506277 LB/K: 1.00 DB/K: 5.00 CLUF: 13420693.00 Index: FK_AKH_AKTL_AKH Col#: 1 6 LVLS: 2 #LB: 35870 #DK: 184651 LB/K: 1.00 DB/K: 6.00 CLUF: 1131183.00 Index: KEY_AKT Col#: 1 2 3 4 5 6 LVLS: 2 #LB: 82467 #DK: 13793510 LB/K: 1.00 DB/K: 1.00 CLUF: 11691370.00 Access path analysis for AKT *************************************** SINGLE TABLE ACCESS PATH Single Table Cardinality Estimation for AKT[AKT] Column (#6): NewDensity:0.000000, OldDensity:0.000000 BktCnt:4202816, PopBktCnt:4202810, PopValCnt:133, NDV:139 Column (#6): AKTL_ZEN( AvgLen: 4 NDV: 139 Nulls: 0 Density: 0.000000 Min: 1 Max: 61044 Histogram: Freq #Bkts: 139 UncompBkts: 4202816 EndPtVals: 139 Column (#2): NewDensity:0.129575, OldDensity:0.000000 BktCnt:4201875, PopBktCnt:4201875, PopValCnt:2, NDV:2 Column (#2): AKT_AT_AT_SE_SE_AG_AG_WG( AvgLen: 3 NDV: 2 Nulls: 0 Density: 0.129575 Min: 6 Max: 7 Histogram: Freq #Bkts: 2 UncompBkts: 4201875 EndPtVals: 2 Column (#3): NewDensity:0.000000, OldDensity:0.000000 BktCnt:4197711, PopBktCnt:4197711, PopValCnt:52, NDV:52 Column (#3): AKT_AT_AT_SE_SE_AG_AG_NO( AvgLen: 3 NDV: 52 Nulls: 0 Density: 0.000000 Min: 6 Max: 99 Histogram: Freq #Bkts: 52 UncompBkts: 4197711 EndPtVals: 52 Column (#85): SYS_STUF1FT2E0X6B6C$__BGEZQRHS( AvgLen: 12 NDV: 5571 Nulls: 0 Density: 0.000180 Min: 2117233 Max: 9997926970 Column (#84): NewDensity:0.000000, OldDensity:0.000000 BktCnt:4201269, PopBktCnt:4201265, PopValCnt:71, NDV:75 Column (#84): SYS_STULHCKPI#FOQE1JMOOXNGSFB0( AvgLen: 12 NDV: 75 Nulls: 0 Density: 0.000000 Min: 157628517 Max: 9982459671 Histogram: Freq #Bkts: 75 UncompBkts: 4201269 EndPtVals: 75 Column (#4): NewDensity:0.000001, OldDensity:0.000000 BktCnt:4201338, PopBktCnt:4201338, PopValCnt:69, NDV:69 Column (#4): AKT_AT_AT_SE_SE_NO( AvgLen: 3 NDV: 69 Nulls: 0 Density: 0.000001 Min: 1 Max: 98 Histogram: Freq #Bkts: 69 UncompBkts: 4201338 EndPtVals: 69 Column (#5): AKT_AT_AT_NO( AvgLen: 4 NDV: 7466 Nulls: 0 Density: 0.000134 Min: 1 Max: 9964 Column (#1): AKTL_AKH( AvgLen: 5 NDV: 16307 Nulls: 0 Density: 0.000061 Min: 14 Max: 543136 Column (#55): NewDensity:0.000001, OldDensity:0.000000 BktCnt:4203610, PopBktCnt:4203610, PopValCnt:5, NDV:5 Column (#55): AKTL_BELART2( AvgLen: 3 NDV: 5 Nulls: 0 Density: 0.000001 Histogram: Freq #Bkts: 5 UncompBkts: 4203610 EndPtVals: 5 Column (#57): NewDensity:0.000002, OldDensity:0.000001 BktCnt:254, PopBktCnt:253, PopValCnt:1, NDV:2102 Column (#57): AKTL_BELNR2( AvgLen: 3 NDV: 2102 Nulls: 0 Density: 0.000002 Min: 0 Max: 9902670 Histogram: HtBal #Bkts: 254 UncompBkts: 254 EndPtVals: 2 Column (#54): NewDensity:0.000088, OldDensity:0.000000 BktCnt:4204429, PopBktCnt:4204429, PopValCnt:6, NDV:6 Column (#54): AKTL_BELART1( AvgLen: 3 NDV: 6 Nulls: 0 Density: 0.000088 Histogram: Freq #Bkts: 6 UncompBkts: 4204429 EndPtVals: 6 Column (#56): NewDensity:0.000000, OldDensity:0.000001 BktCnt:254, PopBktCnt:223, PopValCnt:1, NDV:392568 Column (#56): AKTL_BELNR1( AvgLen: 3 NDV: 392568 Nulls: 0 Density: 0.000000 Min: 0 Max: 9904026 Histogram: HtBal #Bkts: 254 UncompBkts: 254 EndPtVals: 32 ColGroup (#5, Index) AKT_INDEX Col#: 1 2 3 4 5 6 CorStregth: 8702149.74 ColGroup (#3, Index) AKT_INDEX012 Col#: 2 3 4 5 6 CorStregth: 2971.37 ColGroup (#1, VC) SYS_STUF1FT2E0X6B6C$__BGEZQRHS Col#: 2 3 6 CorStregth: 2.59 ColGroup (#4, Index) FK_AKH_AKTL_AKH Col#: 1 6 CorStregth: 12.28 ColGroup (#7, Index) AKT_INDEX010 Col#: 54 56 CorStregth: 6.00 ColGroup (#6, Index) AKT_INDEX011 Col#: 55 57 CorStregth: 5.00 ColGroup (#2, VC) SYS_STULHCKPI#FOQE1JMOOXNGSFB0 Col#: 2 3 CorStregth: 1.39 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 Column (#34): NewDensity:0.000000, OldDensity:0.000000 BktCnt:4199313, PopBktCnt:4199311, PopValCnt:9, NDV:11 Column (#34): AKTL_STAT( AvgLen: 2 NDV: 11 Nulls: 0 Density: 0.000000 Histogram: Freq #Bkts: 11 UncompBkts: 4199313 EndPtVals: 11 Table: AKT Alias: AKT Card: Original: 14006583.000000 Rounded: 3 Computed: 3.05 Non Adjusted: 3.05 Access Path: TableScan Cost: 131075.91 Resp: 131075.91 Degree: 0 Cost_io: 129428.00 Cost_cpu: 16864951683 Resp_io: 129428.00 Resp_cpu: 16864951683 kkofmx: index filter:"AKT"."AKTL_ZEN"=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKTL_AKH">=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKTL_AKH"<=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKTL_ZEN"=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKTL_ZEN"=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKTL_ZEN"=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKT_AT_AT_SE_SE_AG_AG_WG"=TO_NUMBER(:B1) kkofmx: index filter:"AKT"."AKT_AT_AT_SE_SE_AG_AG_NO"=TO_NUMBER(:B1) ColGroup Usage:: PredCnt: 2 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 Access Path: index (RangeScan) Index: AKT_INDEX resc_io: 1128.00 resc_cpu: 45259416 ix_sel: 0.013333 ix_sel_with_filters: 0.000000 ***** Logdef predicate Adjustment ****** Final IO cst 0.00 , CPU cst 150.00 ***** End Logdef Adjustment ****** ***** Logdef predicate Adjustment ****** Final IO cst 0.00 , CPU cst 151.08 ***** End Logdef Adjustment ****** ***** Logdef predicate Adjustment ****** Final IO cst 0.00 , CPU cst 151.13 ***** End Logdef Adjustment ****** Cost: 567.59 Resp: 567.59 Degree: 1 ColGroup Usage:: PredCnt: 2 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 Access Path: index (skip-scan) SS sel: 0.000096 ANDV (#skips): 7466.000000 SS io: 7466.000000 vs. index scan io: 887.000000 Skip Scan rejected Access Path: index (RangeScan) Index: AKT_INDEX012 resc_io: 2177.00 resc_cpu: 54677577 ix_sel: 0.013333 ix_sel_with_filters: 0.000096 ***** Logdef predicate Adjustment ****** Final IO cst 0.00 , CPU cst 150.00 ***** End Logdef Adjustment ****** Cost: 1092.54 Resp: 1092.54 Degree: 1 Access Path: index (RangeScan) Index: FK_AKH_AKTL_AKH resc_io: 201.00 resc_cpu: 15070140 ix_sel: 0.004500 ix_sel_with_filters: 0.000032 Cost: 101.24 Resp: 101.24 Degree: 1 New AP rejected: guess used for New but not for Current Best ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 3 Matches Full: #2 Partial: Sel: 0.0133 Access Path: index (RangeScan) Index: KEY_AKT resc_io: 380.00 resc_cpu: 15131385 ix_sel: 0.004500 ix_sel_with_filters: 0.000000 ***** Logdef predicate Adjustment ****** Final IO cst 0.00 , CPU cst 150.00 ***** End Logdef Adjustment ****** Cost: 191.20 Resp: 191.20 Degree: 1 New AP rejected: guess used for New but not for Current Best ****** trying bitmap/domain indexes ****** Access Path: index (IndexOnly) Index: FK_AKH_AKTL_AKH resc_io: 164.00 resc_cpu: 13914716 ix_sel: 0.004500 ix_sel_with_filters: 0.000032 Cost: 82.68 Resp: 82.68 Degree: 0 SORT ressource Sort statistics Sort width: 612 Area size: 1048576 Max Area size: 107366400 Degree: 1 Blocks to Sort: 1 Row size: 21 Total Rows: 252 Initial runs: 1 Merge passes: 0 IO Cost / pass: 0 Total IO sort cost: 0 Total CPU sort cost: 10324700 Total Temp space used: 0 ColGroup Usage:: PredCnt: 2 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 2 Matches Full: #2 Partial: Sel: 0.0133 ColGroup Usage:: PredCnt: 2 Matches Full: #2 Partial: Sel: 0.0133 Access Path: index (IndexOnly) Index: AKT_INDEX resc_io: 1122.00 resc_cpu: 45203856 ix_sel: 0.013333 ix_sel_with_filters: 0.013333 Cost: 563.21 Resp: 563.21 Degree: 0 SORT ressource Sort statistics Sort width: 612 Area size: 1048576 Max Area size: 107366400 Degree: 1 Blocks to Sort: 481 Row size: 21 Total Rows: 186754 Initial runs: 2 Merge passes: 1 IO Cost / pass: 262 Total IO sort cost: 743 Total CPU sort cost: 169417045 Total Temp space used: 3015000 Bitmap nodes: Used FK_AKH_AKTL_AKH Cost = 83.692016, sel = 0.000018 Not used AKT_INDEX Cost = 1940.139796, sel = 0.013333 ****** finished trying bitmap/domain indexes ****** Best:: AccessPath: IndexRange Index: AKT_INDEX Cost: 567.59 Degree: 1 Resp: 567.59 Card: 3.05 Bytes: 0 ***************************************
THX in advance
Joerg
Published by: Joerg on September 23, 2011 17:05The bind variable you made are non-peekable, because the example you did evidence "explain plan" - which means that the optimizer uses is standard figures assumed that for "between: bind1 and: bind2 ', on the other hand, as predicates" column =: channels3 "can legally be estimated according to the density of the column.
This means that you probably searching for the case described in a blog post that I wrote some time ago:
http://jonathanlewis.WordPress.com/2010/09/07/CBO-surprise-3/Concerning
Jonathan Lewis -
My mac mini (mid-2010) speed/performance is very slow - think of it as a result of letting my kids do "whatever" about it in recent years. Need help, consolidate the files, software updates, etc. in order to improve the speed and performance. You will also need to get data out of old PowerBook G4.
< object edited by host >
We are users like you. Search locally by using something like Yelp or similar
or read a few links which may be relevant on this forum about the slow mac mini
-
Need to get the result of the required format
Hi all
I'll have the data in a table below:
ID NUM1 num2 1 555 555 2 123 345 3 456 567 4 666 666 ID NUM1 num2 1 555 555 2 123 345 3 456 567 4 666 666 and they need to get the result as below:. Help, please...
ID NUM 1 555 2 123 2 345 3 456 3 567 4 666 Thanks in advance...
Hello
So, instead of having 2 columns on 1 row, you want to have 1 column on 2 rows. It's just that UNPIVOT:
SELECT DISTINCT
ID, num
D
UNPIVOT (num
FOR the label IN (num1, num2)
)
ORDER BY id, num
;
It is more effective than the UNION, because it requires only 1 pass through the table.
-
Hello need help with the opacity mask.
Hello need help with the opacity mask. I hope someone out there can help
I inherited a logo that appears to use a Logo of OM has a shape with a grad. This grad at first sight is not used in the Grad scheme and there is not editable. Looking at the transparency palette I find an OM (pic1) output option. If I choose what the grad on separates it from the page of the form, that is from there I can change/remove as required (Note2).
However, sometimes (he did no change), I'll be back to the same original form and output option is grayed out and is no longer available. Or I go to the similar shape that has the same treatment and I can't go out OM (pic3)
The only difference is the thumbnail in the transparency palette, which is strong in pic1 and rated on pic3. What Miss me? I'm not clear what the advantage is simply OM using the Grad palette to apply a grad in my form, but until I can get rid of OM who is there, I can't comfortably apply to the grad I want.
The white gradient LHS I have no problem with. I choose fortunately only and each time get the possibility of release of OM.
The other thing weird. When I select the white gradient. Sometimes, the exit option is in the palette without going through the drop-down list (Fig 4).
Other times seems not that OM has already been applied, because the palette gives me the ability to mask rather than liberation (5 photos). Until I go to the drop down and then I find Release is an option after all.
What is the difference here? Not much of a problem, because either way I can release OM to be able to change the grad.
The file is passed through several hands and play anywhere to try to resolve issues, and many stops and save slot, so something along the line was of course done a logo and not the other because of the difference, but I can't for the life of me see what that.
I hope someone can help. Very appreciated
See you soon
Dave
Dave,
I've (mis) understanding the issues, you can account for the box to the right in the main palette transparency (called thumbnail) here.
Illustrator help | Transparency and blending modes
represents the masking objects.
Some of your screenshots show no object mask, so it only is not really a mask even if do the opacity mask has been clicked and there seems to be one in the layers palette, wherever you look.
I think that it is perhaps the issue.
-
Making the ear of corn and need help with the ball.
I do some corn on the COB for an illustration and I need help with the texture of the ball. I've been slowly making progress with gradient for kernels mesh, but I can't seem to recreate the look of the ball at all. I tried to recreate it in a rectangle by using the option in the menu object (1 row, 50 columns) gradient mesh and I'm trying with the fusion in object mode, but not lucky yet. Can someone help to put me on the right track to make the texture:
I've been slowly making progress with gradient for kernels mesh, but I can't seem to recreate the look of the ball at all.
Tank,
You have published three images stylistically very different. The first is photographic and call probably (but not necessarily) for graduates of mesh. The other two are graphical treatments (and frankly, they're both rather flat; lack of depth).
Illustration style extends the range of cartoonish in sketchy photo-realism and all the rest. The problem is you didn't show your own attempt so that anyone can have an idea of what you're trying to achieve the stylistic point of view.
I just need to put in place so that the final step does not appear the whole box. The problem now is trying to make the style of the good brush to reproduce the effect...
You seem to think you have to build a kind of linear construction and then find a way to reshape the shape of each part of the leaf. Yes, you pouvez approach it this way, but Illustrator users has often tend to be what aunt Molly would call "too clever by half."
Not everything must be something semi intelligent auto or complex and tedious consruct involving brushes, envelopes, masks, etc, etc. Much can be accomplished by thinking that he just thanks to measure you draw directly economic paths and constructions, which take no more time (often less) and result in very tidy, simple files. Again, a lot depends on what you are trying to achieve the stylistic point of view. But here's an example that only took a few minutes to draw:
If the above consists of:
Three roads closed, 8 points each, with ordinary linear degrees
Three mixtures of open path with three anchor points for each key path
Six paths closed for shadows / highlights, with 19 points in total
Mixtures being directly from the paths drawn comic forms, the spacing of the veins 'automatically' and intuitively follows the width from point of view of the worksheet.
Rather than to build a boilerplate brush, colouring and the weight of each of the three main paths of the vein mixtures can be set individually at any time, simply directly by selecting the key path.
JET
-
Help understand the File Formats
I need help with the file formats. Is there an alternative to EPS files which allows customers to use vector graphics files in their projects? My client has a graphic logo vector she wishes that the background is transparent and the clarity of the vector illustration, rather than a Jpeg file. I read here that EPS files are becoming obsolete, but do not understand what it replaces. I know that SVG files can be used, but I thought that the user could use Adobe software to open it. Can someone please help me understand what file formats are best for logos?
Thank you!
Kim
For users of Illustrator, the preferred format is a simple Illustrator .ai file. The default options when registering as an Adobe Illustrator file include the incorporation of a PDF file in the Illustrator file. This means that the data is stored twice: once as an Illustrator fully editable file, complete with live effects, links to the placed art, layers, etc. and once in PDF format that can be read by many programs, including InDesign, Photoshop, Apple Preview, MS Word, Adobe Reader and many others.
If you only use Adobe programs, there is no reason to save the Illustrator EPS file. If you need to transfer your Illustrator files to another program, you must maintain with the limits of this program and its import options, which can mean saving in EPS format. If you work in a non Adobe drawing program, such as CorelDraw, but yo I want to convert your Illustrator illustrations, then the same restrictions apply. Try to save as many formats, including the native format of the program, PDF, EPS, and Illustrator. Open each in Illustrator and use the file kept more modifiable information, such as layers, text, and related files.
Tell us which programs and what are the versions, you use. Chances are there is someone here who has experience in this conversion and you can talk through it.
-
Need help with the installation of an adapter of graphics Super Palit GeForce 9500GT - 512 MB - DDR2 SDRAM in a M2N68 motherboard (narra6). Should I disable the onboard graphics in the bios? When the card is installed, no VGA work outs and the PC does not start. Checked and recontroler implementation of the card in the PCI slot. PC is a desktop HP G5200uk PC. Windows 7 operating system.
Hello
The link below is a guige to install a video card in your Pc. In particular, it seems that you will have to perhaps specify the location of the new card in the bios and save this change before you install the new card - see step 4 in the guide on the link below. If your new card fits into the PCI Express x 16 slot, you will need to define PCI Express in the bios and save the changes.
http://support.HP.com/us-en/document/c01700855
Kind regards
DP - K
-
Satellite Pro A300-15V, I need help in the Organization of my startup list
Hello everyone!
I need help in the Organization of my startup list:
(Why should Toshiba button support I this program if my laptop doesn't have multimedia keys? OR maybe this program for something else?)
ItSecMng (although I have disabled the Bluetooth Manager to run when starting from this point still remains in the startup)
Agent of filtering of Audio Conexant high definition (what is this program? Do I really need to start?)
TOSHIBA Power Saver
Toshiba Flash Cards
RAID event monitorSo, my friends. Could you give a valuable suggestion whether or not it is prudent to disable startup above entries? I want to speed up my laptop at the highest possible level.
Thanks a lot for your time!
Kind regards
Osman.My laptop:
Toshiba Satellite Pro A300-15V (PSAJ5E) => NOT have multimedia keys except the FN keys.
> Toshiba Button support (why should I this program if my laptop doesn't have multimedia keys? OR maybe this program for something else?)
You can disable it. If your mobile phone does not support the multimedia buttons then this tool is useless.> ItSecMng (although I have disabled the Bluetooth Manager to run when starting from this point still remains in the startup)
I don't know what would make this process, but you can disable this in msconfig-> tab start Mr. If it would take in the future, then you could turn it on again.> Agent of filtering the Conexant high definition Audio (what is this program? Do I really need to start?)
I think that this is necessary. It could improve your audio> Toshiba Power Saver
This is important. It s an additional saving of Toshiba option for Win 7> Toshiba Flash Cards
This tool controls the FN keys.> RAID Event Monitor
Hmm so you don t have two hard disks, then you can try to disable it too. -
I need help to the new photo of my photos from iphoto on El Capitan. Any help would be appreciated.
I need help to the new photo of my photos from iphoto on El Capitan. Any help would be appreciated.
To migrate your iPhoto library to Photos for Mac, drag it in the Photos icon in the Dock. Photos will read the iPhoto library and create a new library of pictures of him.
Is your photo library in iPhoto on an external drive? The migration will work that if the external hard drive Mac OS extended (journaled) file system. If the library is on a disk with a different file system, Ministry of the environment of the library of a correctly formatted disk.
Maybe you are looking for
-
MacBook Pro A1260 will not be in service 9/10 times
Got an A1260 of MacBook Pro which does not start until 9 / 10 times. When you try to turn it on, the white sleep button flashes, optical drive makes noise, sleep button turn off, pause, turns on, then off again. No boot chime sound unless it turns
-
Need a new product key for a portable brick
Need a new product key for a laptop of bricks have the old sticker product key on the machine, but she says s not valid. I don't have the original disc, another has been used for this installation. The laptop is all original material, and I can give
-
I received a call from Microsoft Security Department
Hey! I received a call from someone that they are of the Microsoft Security Department. They told me to visit www.microsoftantiscam.webs.com/support and download a program called Ammyy admin. Is it legitimate or not? They told me that they were legit
-
Presentation SMS new Smartphones blackBerry OS 5.0.0.32 8 - Cant adjust the display field
Hello.. The previous txt field (or message thread field) currently only allows you to see about 1 or 2 lines txt, which is almost useless to prepare a long thread of txts. I looked at bberry docs for help and found this: http://docs.BlackBerry.com/en
-
What is - c