note for programming

CHARSET check queries :
select parameter, value from nls_database_parameters where parameter = 'NLS_CHARACTERSET'

CHARSET Change

Connect account as SYSTEM 

update sys.props$ set value$='KO16MSWIN949' where name='NLS_CHARACTERSET'; 
update sys.props$ set value$='KO16MSWIN949' where  name='NLS_NCHAR_CHARACTERSET';
update sys.props$ set value$='KOREAN_KOREA.KO16MSWIN949' where name='NLS_LANGUAGE';
commit;
 
SHUTDOWN IMMEDIATE;
STARTUP MOUNT;
ALTER SYSTEM ENABLE RESTRICTED SESSION;
ALTER SYSTEM SET JOB_QUEUE_PROCESSES=0;
ALTER SYSTEM SET AQ_TM_PROCESSES=0;
ALTER DATABASE OPEN;
ALTER DATABASE CHARACTER SET INTERNAL_USE KO16MSWIN949;
SHUTDOWN IMMEDIATE;
STARTUP;

>>>references,

http://bluescor.tistory.com/entry/%EC%98%A4%EB%9D%BC%ED%81%B4-CHARSET-%ED%99%95%EC%9D%B8-%EB%B3%80%EA%B2%BD

The servletContext.setAttribute() is dynamic which can be set and reset during runtime.

Where as init-parameter specified in web.xml is static which will not change during the lifetime of application.

Example:

• The database properties like database name configuration propety. It will be mostly configured as context init-param
• And if you want to set property value which derives based on runtime changes, like "last user logged in" or "number of failures" should be context attributes.

Session 고정공격 방어책

1. Session ID –> URL 붙여넣기 기능 비활성화

2. 로그인 후 세션 마이그레이션(Session Migration)

Session 구성

<session-timeout>

단위: 초, 0이하는 세션 만료x,

tomcat: 초라고 책에서 나왔지만 테스트해보니 분인것같다.

default:30s