xpresszine|xpress magazine

In an interview to the San Francisco Chronicle, Robbie Bach, president of Microsoft’s Entertainment & Devices Division, cleared that the company has no plans for rolling out a ZunePhone anytime in near future.

The interview takes place on the eve of Apple’s WWDC, which anticipates the unveiling of a new iPhone.

Bach stressed that Windows mobile has a very nice position to fit in the consumer market and Microsoft dosen’t have any plans to fiddle with it. He said

“We don’t make phones ourselves. We don’t have any plans to make phones ourselves. Our focus is on the belief that a phone is a very personal thing. Different people want different types of phones. We think that is going to continue, and we think Windows Mobile is in a great position to service all those different opportunities.”

Bach also pointed out how Microsoft aims at the market. He told

“There is more opportunity for services on top of the(those) phones. There is more opportunity for a richer experience. It’s not just about the phone. It’s about browsing. It’s about music. It’s about video. It’s about e-mails, text messaging and photos.”

Well, Microsoft may have its say, but as of now iPhone is rocking, who know how the future would look like? Will this be an yet another Apple-Microsoft Desktop saga?? or Would Apple be able to keep its hold over the market??

SQL Injection is a technique that exploits a security vulnerability at the database layer of an application. It is a special way of crafting or designing an input string such that the user gets control over the database.

For eg: Mostly all database related statements would look similar to:
SELECT * FROM EMPLOYEE WHERE EMP_ID = ' + $emp_id + ' AND PASSWD = ' + $passwd + ';

Imagine if an user inputs the passwrod string like
e' or 'e'='e

then the query would become
SELECT * FROM EMPLOYEE WHERE EMP_ID = ' + $emp_id + ' AND PASSWD = 'e' OR 'e'='e';

This would always evaluate to true and would grant the user access to the whole data.
A notorius user can even write multiple query lines to say Drop Table etc.

Two Steps to tackle this situation:
1. Limit Permissions:
The DB administrator should create different users depending on the kind of action performed, and appropriate credentials with least priviledges necessary for a task to be performed should be used. This could prevent most attacks but not all.

2. Clean the Input String:
PHP team has already released a function "mysql_real_escape_string()" to tackle this situation. This function replaces the (‘) with a (\’) and thus would not allow the attack.
So all you have to do is:
$passwd = mysql_real_escape_string($passwd);

Now the query would become:
SELECT * FROM EMPLOYEE WHERE EMP_ID = ' + $emp_id + ' AND PASSWD = 'e\' OR \'e\'=\'e';

Hope this helps!!!

Windows Vista basically replaces the popular hibernate feature with a new one called ‘Sleep‘, which is a combination of both Hibernation and Stand-By. In any case if you use a computer that is not always connected to power like a Laptop, you do need hibernation features. Or maybe your scenario doesn’t needs hibernation. So why waste the hard-disk space that the hiber.sys takes on your system? In any case you need a method to easily enable/disable hibernation feature on your machine.

As usual, XpressZine would always give/suggest you the best and easiest option to do any task.

So open up your command prompt by typing ‘cmd‘ in the ‘Run‘ window. Once the ‘Command Prompt‘ appears type the below code to finish the task you want to achieve.

To Enable Hibernation:

Type ‘powercfg -h on‘ (without quotes)

To Disable Hibernation:

Type ‘powercfg -h off‘ (without quotes)

NOTE: You need to have administrator access to complete this function.

NOTE: A confirmation may not be given. If no error is displayed then it would mean that the command executed successfully.