Java Persistence Frameworks

Java Persistence
Frameworks
Popular and next generation persistence frameworks

Thomas Müller
Day Software AG
Presentation 7780

2

Agenda
• Introduction
• Persistence Frameworks
- SQL(++)
- O/R Mapping
- Next Generation

• SQL Injection

3

Introduction

Thomas Mueller
Software Engineer

http://www.h2database.com
http://www.day.com
http://jackrabbit.apache.org

4

Persistence Frameworks
1990

1995

2000

2005

2010

4

1990
SQL(++) ODB C
1995
JDBC
2000
iBATIS DbU t i l s

2005

2010

4

1990
SQL(++) ODB C
1995 O/R mapping
JDBC
e
2000 H i be r n at
iBATIS DbU t i l s J DO
J PA
2005

2010

4

1990
SQL(++) ODB C
1995 O/R mapping
JDBC
e next generation
2000 H i be r n at
J PA
LINQ
2005
JaiQ u
SFq uMl
l
LIQUid OR
QL
2010 iS
oo te Q ub
JJmsuirErLyd s lre
E QpU e - d ae
EQ

4

1990
SQL(++) ODB C
1995 O/R mapping
JDBC
e next generation
2000 H i be r n at
J PA
LINQ
2005
JaiQ u
SFq uMl
l
LIQUid OR
QL
2010 J PA 2 .0 iS
oo te Q ub
JJmsuirErLyd s lre
E QpU e - d ae
EQ

5

SQL(++)

public class Student {
private String name;
public void setName(String name) {
this.name = name;
}
public String getName() {
return name;
}
}

5

SQL(++) public class Student {
this.name = name;
}
return name;
}
}

PreparedStatement prep =
conn.prepareStatement(
"select * from Student where name = ?");
prep.setString(1, name);
ResultSet rs = prep.executeQuery();
rs.next();
Student student = new Student();
student.setName(rs.getString(1));

JDBC

5

this.name = name;
}
return name;
}
}

<sqlMap resource="com/mydomain/data/Student.xml"/>

<sqlMap namespace="Student">
<typeAlias alias="Student" type="com.mydomain.data.Student"/>

<select id="selectStudent" resultClass="Student">

select * from Student where name = #name#

</select>
</sqlMap>
PreparedStatement prep = Student student = (Student) sqlMapper.
"select * from Student where name = ?"); queryForObject("selectStudent", name);
rs.next();
Student student = new Student();

JDBC iBATIS

5

this.name = name;
}
return name;
}
}

conn.prepareStatement( <sqlMap namespace="Student">
"select * from Student where name = ?"); <typeAlias alias="Student" type="com.mydomain.data.Student"/>
selectStudentStudent where name sqlMapper.
* from student = (Student) = #name#
rs.next();
</select> queryForObject("selectStudent", name);
Student student = new Student(); </sqlMap>

JDBC iBATIS

5

this.name = name;
}
return name;
}
}

ResultSetHandler h = new BeanHandler(Student.class);
Student s = (Student) run.query(conn,
"select * from Student where name=?",
handler, new Object[]{name});
"select * from Student where name = ?"); <typeAlias alias="Student" type="com.mydomain.data.Student"/>
rs.next();

JDBC DbUtils iBATIS

5

this.name = name;
}
return name;
}
}

"select * from Student where name = ?"); ResultSetHandler h = new BeanHandler(Student.class); <typeAlias alias="Student" type="com.mydomain.data.Student"/>
prep.setString(1, name); Student s = (Student) run.query(conn,
ResultSet rs = prep.executeQuery(); "select * from Student where name=?",
rs.next(); handler, new Object[]{name});

JDBC DbUtils iBATIS

6

O/R Mapping
Illusion
- there is no database

b e r n a te
- still need configuration
Hi
Auto-Save
- objects are stateful
- automatic dirty checking
J DO
J PA
Auto-Navigation
- in queries
- get() loads referred object
- collection support

7

O/R Mapping

J DO J PA e
H i be r n at

7

O/R Mapping

J DO J PA e
H i be r n at

“technology agnostic” RDBMS RDBMS

7

O/R Mapping

J DO J PA e
H i be r n at


few implementations many most popular

7

O/R Mapping

J DO J PA e
H i be r n at


few implementations many most popular

Google AppEngine Google AppEngine

8

Hibernate
Dependencies

hibernate3.jar

hibernate-annotations.jar

hibernate-commons-annotations.jar

commons-collections-3.1.jar

commons-logging-api-1.1.jar

commons-logging-1.1.jar

ejb3-persistence.jar

antlr-2.7.6.jar

dom4j-1.6.1.jar

javassist-3.4.GA.jar

jta-1.1.jar

slf4j-api-1.5.6.jar

slf4j-simple-1.5.6.jar

8
<!DOCTYPE hibernate-configuration PUBLIC

hibernate3.jar

"-//Hibernate/Hibernate Configuration DTD 3.0//EN"


Hibernate


"http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">


<hibernate-configuration>

antlr-2.7.6.jar
dom4j-1.6.1.jar
<session-factory>

jta-1.1.jar
slf4j-api-1.5.6.jar

<property name="connection.url">jdbc:h2:mem:test</property>


<property name="connection.username">sa</property>
<property name="connection.driver_class">org.h2.Driver</property>
Dependencies <property name="dialect">org.hibernate.dialect.H2Dialect</property>
<property name="connection.password">sa</property>
</session-factory>

Configuration </hibernate-configuration>

hibernate.cfg.xml
Annotations or XML
import javax.persistence.*;

@Entity
@Id @GeneratedValue
private Long id;
@Column
}

8

hibernate3.jar



Hibernate





antlr-2.7.6.jar

dom4j-1.6.1.jar


jta-1.1.jar

slf4j-api-1.5.6.jar


Dependencies

Configuration
hibernate.cfg.xml Student s = (Student) session.createQuery(
Annotations or XML "from Student s where name=?").
setString(0, name).list().get(0);
Query
<!DOCTYPE hibernate-configuration PUBLIC import javax.persistence.*;
"-//Hibernate/Hibernate Configuration DTD 3.0//EN"
"http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
@Entity
<hibernate-configuration>
<session-factory> public class Student {
<property name="connection.url">jdbc:h2:mem:test</property> @Id @GeneratedValue
<property name="connection.username">sa</property> private Long id;
<property name="connection.driver_class">org.h2.Driver</property> @Column
<property name="dialect">org.hibernate.dialect.H2Dialect</property>
<property name="connection.password">sa</property> private String name;
</session-factory> }
</hibernate-configuration>

9

Next Generation: JaQu
POJO
this.name = name;
}
return name;
}
}

9


POJO
this.name = name;
}
return name;
}
}

Query
- Typesafe Student s = new Student();
- Embedded DSL s = db.from(s).where(s.name).
- Fluent API
- Autocomplete is(name).selectFirst();

9


POJO
this.name = name;
}
return name;
}
}

Query
- Typesafe Student s = new Student();
- Embedded DSL s = db.from(s).where(s.name).
- Fluent API
- Autocomplete is(name).selectFirst();

No String Student s = new Student(); Student s = new Student();
- No SQL injection List<Student> students = s.name = "Robert";
db.from(s).where(s.name). db.insert(s);
is(name).select();

10

SQL Injection

stat.execute("select * from " +
"Students where name='" +
name + "'");

10

SQL Injection

stat.execute("select * from " +
"Students where name='" +
"Robert'; DROP TABLE Students--'");
name + "'");

10

SQL Injection

"select * from " +
"Students where name=?"); stat.execute("select * from " +
prep.setString(1, name); "Students where name='" +
prep.execute(); "Robert'; DROP TABLE Students--'");
name + "'");

11

SQL Injection

CT * " +
JDBC stat.exe cute("SELE ERE " +
ERS WH
"FROM US ='"+pwd+"'");
D
"PASSWOR

11

SQL Injection

run.query( ("SELECT * " +
JDBC te
stat.execu * ERS WHERE s +
"SELECT S FROM User " " +
"F HEREU sswor
"WROM paD='"+pwd'" "'");
+
DBUtils SWOR
pwAS+ "'");
"P d
d= +

11

SQL Injection
< lect d
rusequeriy(=""SELECT * " +
n. g
JDBC selext cDte( etUser"RE " +
t.ec e I u asFRS WHE ...>
sta ELECT * EidOM Users
"S
whHEMPUS R fromwd+""S);
"F er RE pass O + U
"WROe ASSWworp = SER '"+
DBUtils '$PASSWORD='" D = '" +
"pd + '
pwwd$"'");
Rd
</select>
iBATIS

11

SQL Injection
< lect d
rusequeriy(=""SELECTQuery(
n. q = *"+
JDBC Query t cDte(g.creaer" ..E " +
selexe I u emetUs te R .>
stat.ec ECTasEidSfWH) "ers
"SEL (u E
"SELereT U* FRCTom U+E""S);
whHEMPOBJE OM pwd+ R +
O REAS R r Us S +
EC
"WR Us Rss ORD = " '"
"F
"FROSSWOSSWwordRE '" +
pa u W+
DBUtils '$PAM$' erD='"HE =
" pwd "'"); '"+pwd+"'");
pwd +
</selesword=
"pasct>
iBATIS
JPA

11

SQL Injection
< l t d
rusequeriy(=""SELECTQuery(
Querecq = em.creaer * "y(
n. y =
er +
JDBC Qutley tqIDte(getUs te" er " +
se .execu pm.newQuRE
c ...>
staUserECas* EidSfWH) "ers
EC as,
"SEL T OBJE OM Us
s E
"SELer.clT S FRCTom U+E""S);
whHEMPU R r (u wd+ R +
"WR M UserD'"+RD RES +
"F Oe AS
"passwor SWO HE = " '"
RE pa u W+p
"FROSSWOd= ='"pwd+"'"+
DBUtils '$PA d$' Rssword = '" );
" pw + "'"); '"+pwd+"'");
pwd
</selesword=
"pasct>
iBATIS
JPA
JDO

11

SQL Injection
< l t d
rusequeriy(=""SEresCTQuery(
Querecq = q(g.creaeeQu y(
n. y = pm.newQu* " +
JDBC Quer y tqIDte metLE te" er " +
selexecu em.c U atr RE
u"SEL
Q t.ec ...>
staUserECas* EidSfWH) + +s
.clTaS FRCTom "er " +
s R Or (u"E
s,JE OM Us S
M U E );
"SEECT OB
"SELereCT *
whHEMPU
"F LE pass O pwwd+"'"
"WRO REAerDuworpRE ER+ " +
Su W d H R
"passworSct '"+RDW= "'"ES
M WOd= ='"HE d+'" +
Us R W re+ d = " );
DBUtils "FROunstru
'$Pt: SS '
"n w
"pd +
pwA d$"'"rd='"+pwd+"'",
</s"pesword='"+pwd+"'");
"pasct> o );
el assw
iBATIS Query.SQL);

JPA
JDO
JCR

11

SQL Injection
< l t d
rusequeriy(=""SEresCTQuery(
Querecq = q(g.creaeeQu y(
n. y = pm.newQu* " +
JDBC Quer y tqIDte metLE te" er " +
selexecu em.c U atr RE
u"SEL
Q t.ec ...>
staUserECas* EidSfWH) + +s
.clTaS FRCTom "er " +
s R Or (u"E
s,JE OM Us S
M U E );
"SEECT OB
"SELereCT *
whHEMPU
"F LE pass O pwwd+"'"
"WRO REAerDuworpRE ER+ " +
Su W d H R
"passworSct '"+RDW= "'"ES
M WOd= ='"HE d+'" +
Us R W re+ d = " );
DBUtils "FROunstru
'$Pt: SS '
"n w
"pd +
pwA d$"'"rd='"+pwd+"'",
</s"pesword='"+pwd+"'");
"pasct> o );
el assw
iBATIS Query.SQL);

JPA
JDO
);
User u = new User(
JCR db.from(u).
is(pwd).
where(u.password).
select();

JaQu

Images are Creative Commons licensed
Thomas Mueller Mountain Bike
http://www.flickr.com/photos/kgsbikes/3043775162
Software Engineer Solex
http://www.e-solex.fr
http://www.h2database.com Scooter
http://www.flickr.com/photos/janet/2844615758
http://www.day.com Generic Car
http://jackrabbit.apache.org http://www.flickr.com/photos/markscott/389221242
Generic Jeep
http://www.flickr.com/photos/markscott/389221372
Ford Focus
http://www.flickr.com/photos/stevecoulterperformancecars/
2965383580
Smart
http://www.smart.com
xkcd Comic "Exploits of a Mom"
http://xkcd.com/327

http://ibatis.apache.org
http://commons.apache.org/dbutils
http://www.hibernate.org
http://www.datanucleus.org
http://openjpa.apache.org
http://www.eclipse.org/eclipselink
http://www.oracle.com/technology/products/ias/toplink
http://www.h2database.com/html/jaqu.html

Java Persistence Frameworks

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Mehr von day

Mehr von day (19)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Java Persistence Frameworks