Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>The AWS PHP SDK <a href="http://aws.typepad.com/aws/2012/04/amazon-dynamodb-libraries-mappers-and-mock-implementations-galore.html" rel="noreferrer">doesn't come with a ORM</a> (binding).</p> <p>However, a few ORM options do appear on GitHub: <a href="https://github.com/bingjie2680/Dynamodb-ORM-php" rel="noreferrer">option1</a>, <a href="https://github.com/raslin/Amazon-dynamo-DB-simple-ORM" rel="noreferrer">option2</a>.</p> <p><strong>Edit with explanation on DynamoDB +- SQL injections:</strong></p> <p>When you use the DynamoDB at the end you are making calls to the DynamoDB API (either get/scan/query). Think about them as REST API receiving JSONs as input. If I want to get an element with hashId X I must set it. I can't set an injection there (such as "'X' or 1=1") because the API won't parse my string, and the engine will simply make an EQ comparison between the string you typed and the attribute in question (in this case - the hash primary key attribute).</p> <p>From Googling around, people noted that NoSQL as in general is not automatically immune to SQL injections (<a href="https://www.idontplaydarts.com/2010/07/mongodb-is-vulnerable-to-sql-injection-in-php-at-least/" rel="noreferrer">see here about MongoDB and PHP</a>) but as far as I know you shouldn't worry when working with DynamoDB since you build the queries as part of the API and not send a long string to the database engine for evaluation.</p> <p>I hope that answers your question, if not feel free to ask more in the comments.</p>
    singulars
    1. This table or related slice is empty.
    1. POsanitize input before inserting data to DynamoDb
      singulars
      1. PTQuestion
    1. PTAnswer
    1. USChen Harel
    1. USChen Harel
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POsanitize input before inserting data to DynamoDb
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. COI am confused about sanitization in this. will this do sanitization and help to prevent SQL injection.
      singulars
      1. PO
      1. USkeen
    2. CODynamoDB doesn't support SQL so you shouldn't care about SQL injection. DynamoDB doesn't parse / run your data in any way. I think you are mixing both sanitization and binding.
      singulars
      1. PO
      1. USChen Harel
    3. COI am bit confused in this. can you please just guide me to right document or just a give small description for this.
      singulars
      1. PO
      1. USkeen
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload