SQLSERVER對加密的存儲過程、視圖、觸發器進行解密(推薦)
時間:2020-01-03來源:系統城作者:電腦系統城
加密測試的存儲過程
- IF EXISTS(SELECT 1 FROM SYSOBJECTS WHERE TYPE='P' AND NAME='P_TEST')
- DROP PROCEDURE P_TEST
- GO
- CREATE PROCEDURE P_TEST(@USERNAME VARCHAR(20),@MSG VARCHAR(20) OUTPUT)
- WITH ENCRYPTION
- AS
- BEGIN
- IF(SELECT COUNT(1) FROM Custs WHERE NAME=@USERNAME)>0
- SET @MSG='此用戶名存在'
- ELSE
- SET @MSG='此用戶名不存在'
- END
解密的存儲過程
- Create PROCEDURE Decryption(@procedure sysname = NULL)
- AS
- SET NOCOUNT ON
- DECLARE @intProcSpace bigint, @t bigint, @maxColID smallint,@procNameLength int
- select @maxColID = max(subobjid) FROM
- sys.sysobjvalues WHERE objid = object_id(@procedure)
- --select @maxColID as 'Rows in sys.sysobjvalues'
- select @procNameLength = datalength(@procedure) + 29
- DECLARE @real_01 nvarchar(max)
- DECLARE @fake_01 nvarchar(max)
- DECLARE @fake_encrypt_01 nvarchar(max)
- DECLARE @real_decrypt_01 nvarchar(max),@real_decrypt_01a nvarchar(max)
- declare @objtype varchar(2),@ParentName nvarchar(max)
- select @real_decrypt_01a = ''
- --提取對象的類型如是存儲過程還是函數,如果是觸發器,還要得到其父對象的名稱
- select @objtype=type,@parentname=object_name(parent_object_id)
- from sys.objects where [object_id]=object_id(@procedure)
- -- 從sys.sysobjvalues里提出加密的imageval記錄
- SET @real_01=(SELECT top 1 imageval FROM sys.sysobjvalues WHERE objid =
- object_id(@procedure) and valclass = 1 order by subobjid)
-
- --創建一個臨時表
- create table #output ( [ident] [int] IDENTITY (1, 1) NOT NULL ,
- [real_decrypt] NVARCHAR(MAX) )
- --開始一個事務,稍后回滾
- BEGIN TRAN
- --更改原始的存儲過程,用短橫線替換
- if @objtype='P'
- SET @fake_01='ALTER PROCEDURE '+ @procedure +' WITH ENCRYPTION AS select 1
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- else if @objtype='FN'
- SET @fake_01='ALTER FUNCTION '+ @procedure +'() RETURNS INT WITH ENCRYPTION AS BEGIN RETURN 1
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/ END'
- else if @objtype='V'
- SET @fake_01='ALTER view '+ @procedure +' WITH ENCRYPTION AS select 1 as col
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- else if @objtype='TR'
- SET @fake_01='ALTER trigger '+ @procedure +' ON '+@parentname+'WITH ENCRYPTION AFTER INSERT AS RAISERROR (''N'',16,10)
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- EXECUTE (@fake_01)
- --從sys.sysobjvalues里提出加密的假的
- SET @fake_encrypt_01=(SELECT top 1 imageval FROM sys.sysobjvalues WHERE objid =
- object_id(@procedure) and valclass = 1 order by subobjid )
- if @objtype='P'
- SET @fake_01='Create PROCEDURE '+ @procedure +' WITH ENCRYPTION AS select 1
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- else if @objtype='FN'
- SET @fake_01='CREATE FUNCTION '+ @procedure +'() RETURNS INT WITH ENCRYPTION AS BEGIN RETURN 1
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/ END'
- else if @objtype='V'
- SET @fake_01='Create view '+ @procedure +' WITH ENCRYPTION AS select 1 as col
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- else if @objtype='TR'
- SET @fake_01='Create trigger '+ @procedure +' ON '+@parentname+'WITH ENCRYPTION AFTER INSERT AS RAISERROR (''N'',16,10)
- /**//*'+REPLICATE(cast('*'as nvarchar(max)), datalength(@real_01) /2 -@procNameLength)+'*/'
- --開始計數
- SET @intProcSpace=1
- --使用字符填充臨時變量
- SET @real_decrypt_01 = replicate(cast('A'as nvarchar(max)), (datalength(@real_01) /2 ))
- --循環設置每一個變量,創建真正的變量
- --每次一個字節
- SET @intProcSpace=1
- --如有必要,遍歷每個@real_xx變量并解密
- WHILE @intProcSpace<=(datalength(@real_01)/2)
- BEGIN
- --真的和假的和加密的假的進行異或處理
- SET @real_decrypt_01 = stuff(@real_decrypt_01, @intProcSpace, 1,
- NCHAR(UNICODE(substring(@real_01, @intProcSpace, 1)) ^
- (UNICODE(substring(@fake_01, @intProcSpace, 1)) ^
- UNICODE(substring(@fake_encrypt_01, @intProcSpace, 1)))))
- SET @intProcSpace=@intProcSpace+1
- END
-
-
- --通過sp_helptext邏輯向表#output里插入變量
- insert #output (real_decrypt) select @real_decrypt_01
- --select real_decrypt AS '#output chek' from #output --測試
- -- -------------------------------------
- --開始從sp_helptext提取
- -- -------------------------------------
- declare @dbname sysname
- ,@BlankSpaceAdded int
- ,@BasePos int
- ,@CurrentPos int
- ,@TextLength int
- ,@LineId int
- ,@AddOnLen int
- ,@LFCR int --回車換行的長度
- ,@DefinedLength int
- ,@SyscomText nvarchar(max)
- ,@Line nvarchar(255)
- Select @DefinedLength = 255
- SELECT @BlankSpaceAdded = 0 --跟蹤行結束的空格。注意Len函數忽略了多余的空格
- CREATE TABLE #CommentText
- (LineId int
- ,Text nvarchar(255) collate database_default)
- --使用#output代替sys.sysobjvalues
- DECLARE ms_crs_syscom CURSOR LOCAL
- FOR SELECT real_decrypt from #output
- ORDER BY ident
- FOR READ ONLY
- --獲取文本
- SELECT @LFCR = 2
- SELECT @LineId = 1
- OPEN ms_crs_syscom
- FETCH NEXT FROM ms_crs_syscom into @SyscomText
- WHILE @@fetch_status >= 0
- BEGIN
- SELECT @BasePos = 1
- SELECT @CurrentPos = 1
- SELECT @TextLength = LEN(@SyscomText)
- WHILE @CurrentPos != 0
- BEGIN
- --通過回車查找行的結束
- SELECT @CurrentPos = CHARINDEX(char(13)+char(10), @SyscomText,
- @BasePos)
- --如果找到回車
- IF @CurrentPos != 0
- BEGIN
- --如果@Lines的長度的新值比設置的大就插入@Lines目前的內容并繼續
- While (isnull(LEN(@Line),0) + @BlankSpaceAdded +
- @CurrentPos-@BasePos + @LFCR) > @DefinedLength
- BEGIN
- SELECT @AddOnLen = @DefinedLength-(isnull(LEN(@Line),0) +
- @BlankSpaceAdded)
- INSERT #CommentText VALUES
- ( @LineId,
- isnull(@Line, N'') + isnull(SUBSTRING(@SyscomText,
- @BasePos, @AddOnLen), N''))
- SELECT @Line = NULL, @LineId = @LineId + 1,
- @BasePos = @BasePos + @AddOnLen, @BlankSpaceAdded = 0
- END
- SELECT @Line = isnull(@Line, N'') +
- isnull(SUBSTRING(@SyscomText, @BasePos, @CurrentPos-@BasePos + @LFCR), N'')
- SELECT @BasePos = @CurrentPos+2
- INSERT #CommentText VALUES( @LineId, @Line )
- SELECT @LineId = @LineId + 1
- SELECT @Line = NULL
- END
- ELSE
- --如果回車沒找到
- BEGIN
- IF @BasePos <= @TextLength
- BEGIN
- --如果@Lines長度的新值大于定義的長度
- While (isnull(LEN(@Line),0) + @BlankSpaceAdded +
- @TextLength-@BasePos+1 ) > @DefinedLength
- BEGIN
- SELECT @AddOnLen = @DefinedLength -
- (isnull(LEN(@Line),0) + @BlankSpaceAdded)
- INSERT #CommentText VALUES
- ( @LineId,
- isnull(@Line, N'') + isnull(SUBSTRING(@SyscomText,
- @BasePos, @AddOnLen), N''))
- SELECT @Line = NULL, @LineId = @LineId + 1,
- @BasePos = @BasePos + @AddOnLen, @BlankSpaceAdded =
- 0
- END
- SELECT @Line = isnull(@Line, N'') +
- isnull(SUBSTRING(@SyscomText, @BasePos, @TextLength-@BasePos+1 ), N'')
- if LEN(@Line) < @DefinedLength and charindex(' ',
- @SyscomText, @TextLength+1 ) > 0
- BEGIN
- SELECT @Line = @Line + ' ', @BlankSpaceAdded = 1
- END
- END
- END
- END
- FETCH NEXT FROM ms_crs_syscom into @SyscomText
- END
- IF @Line is NOT NULL
- INSERT #CommentText VALUES( @LineId, @Line )
- select Text from #CommentText order by LineId
- CLOSE ms_crs_syscom
- DEALLOCATE ms_crs_syscom
- DROP TABLE #CommentText
- -- -------------------------------------
- --結束從sp_helptext提取
- -- -------------------------------------
- --刪除用短橫線創建的存儲過程并重建原始的存儲過程
- ROLLBACK TRAN
- DROP TABLE #output
- GO
- 啟用DAC
- SP_CONFIGURE 'remote admin connections';
- GO
- ----0:僅允許本地連接使用 DAC,1:允許遠程連接使用 DAC
- SP_CONFIGURE 'remote admin connections', 0;
- GO
- RECONFIGURE WITH OVERRIDE;
- GO
文件——>新建——>數據庫引擎查詢
服務器名稱:admin:.或者admin:服務器名稱
登錄進去執行解密操作
- USE TEST
- EXEC Decryption P_TEST
- GO

為了安全起見,不要在正式環境進行解密,避免在解密過程中將原存儲過程損壞!
總結
以上所述是小編給大家介紹的SQLSERVER對加密的存儲過程、視圖、觸發器進行解密,希望對大家有所幫助,如果大家有任何疑問請給我留言,小編會及時回復大家的。在此也非常感謝大家對我們網站的支持!
相關信息
-
SQL Server中交叉聯接的用法詳解
交叉聯接(cross join)的概念
2、交叉聯接的語法格式
3、交叉查詢的使用場景
3.1 交叉聯接可以查詢全部數據
3.2 交叉聯接優化查詢性能...
2021-04-22
-