Free PDF Manual Guide

This guide is intended to aid the owner-mechanic in understanding and diagnosing Alfa Romeo SPICA fuel supply system
malfunctions. It is not a substitute for the official factory repair publications. No claim to absolute accuracy or utility is
expressed or implied. The reader uses this guide at his own risk.
[Read the rest of this entry...]

The Mono-Jetronic central fuel injection system is fitted to the 1.8 litre (code RP) engine. It is a simplified method of fuel injection (see illustrations). Fuel is injected into the inlet manifold by a single solenoid valve (fuel injector) mounted centrally in the top of the injector unit housing.
The length of time for which the injector remains open determines the quantity of fuel reaching the cylinders for combustion. The electrical signals which determine the fuel injector opening duration are calculated by the Electronic Control Unit (ECU) from information supplied by its network of sensors. Fuel pressure is regulated mechanically.
[Read the rest of this entry...]

The components of the K-Jetronic fuel injection system fitted to the 1.8 litre 16V engine are as shown (see illustrations). All procedures are the same as described in Part B of this Chapter except for those given in the following Sections.
2 Idle speed – adjustment
1. Run the engine to normal operating temperature, then check that all electrical components are switched off. Note that the electric cooling fan must not be running during the adjustment procedure.
[Read the rest of this entry...]

ACCEL recommends using a 180 degree thermostat in most applications. Place your thermostat and gasket onto your manifold, put your thermostat housing onto the manifold and bolt in place. When installing your fuel injectors, be careful not to cut the O-Rings. A small amount of oil on each O-Ring will aid in the assembly. Please reference a service manual for proper torque sequence and vacuum line routing.
[Read the rest of this entry...]

Servicing injection system
The engine control unit has a self-diagnosis capability. Before carrying out repairs and fault finding the fault memory must be interrogated. The vacuum hoses and connections must also be checked (unmetered air).
♦ Fuel hoses in engine compartment must only be secured with spring-type clips. Clamping-type or screw-type clips must not be used.
♦ A voltage of at least 11.5 V is required for proper operation of the electrical components.
♦ Do not use sealants containing silicone. Particles of silicone drawn into the engine will not be burnt in the engine and will damage the Lambda probe.
[Read the rest of this entry...]

The HALTECH E11 is a powerful “real-time” programmable fuel injection system computer designed for those seeking optimum performance. With the large number of outputs available for controlling ignition and fuel, the E11 is well equipped to run engines with sequential fuel and modern multi-coil ignition systems.
[Read the rest of this entry...]

Previously, all Audi models have been assessed on CO2 output using the maximum vehicle weight dependent on engine and transmission configuration. Under the rationalisation, the information is now supplied as a single dataset using the minimum weight for a given vehicle, resulting in significant positive movement of the official CO2 bandings used for BIK tax calculation and Vehicle Excise Duty. The data is provided to the Vehicle Certification Agency (VCA) for use in environmental vehicle labelling and comparisons, and, crucially, also appears on the vehicle V5 registration document. This booklet compares the previous CO2 output for selected Audi models and compares the new values with key competitors for BIK tax and fuel consumption figures.
[Read the rest of this entry...]

Java Injection (CanDI) Pattern Tutorial June 15, 2009 Contents 1 Overview 1 1.1 Tutorial Architecture . . . . . . . . . . . . . . . . . . . . . . . . . 2 1.2 Java Injection API . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2 Service Pattern 4 2.1 Using Services from PHP and JSP . . . . . . . . . . . . . . . . . 5 3 Resource XML Con guration Pattern 6 4 Startup Pattern 9 5 Plugin/Extension Pattern 9 1 Overview The four main CanDI patterns share a common goal: improve code with a declarative injection style. When Java classes cleanly describe their dependen- cies, their lifecycles, and their exports, they are self-documenting.
[Read the rest of this entry...]

SQL injection is yet another common vulnerability that is the result of lax input validation. Unlike cross-site scripting vulnerabilities that are ultimately directed at your site’s visitors, SQL injection is an attack on the site itself—in particular its database. The goal of SQL injection is to insert arbitrary data, most often a database query, into a string that’s eventually executed by the database. The insidious query may attempt any number of actions, from retrieving alternate data, to modifying or removing information from the database.
[Read the rest of this entry...]

How can an attacker exploit a PL/SQL procedure that doesn’t even take user input? Or how does one do SQL injection using DATE or even NUMBER data types? In the past this has not been possible but as this paper will demonstrate, with a little bit of trickery, you can in the Oracle RDBMS. Consider the following code for a PL/SQL procedure:

create or replace procedure date_proc is
stmt varchar2(200);
v_date date:=sysdate;
begin
stmt:=’select object_name from all_objects where created = ”’ ||
v_date || ””;
dbms_output.put_line(stmt);
execute immediate stmt;
end;
/

It takes no parameters and so typically would not be audited. That said, we can see that the V_DATE variable is embedded within an SQL query which is then dynamically executed via the EXECUTE IMMEDIATE statement. Tracing back through the code we see that value for V_DATE is assigned from a call to the SYSDATE() built in function. If this were somehow influenceable then an attacker could potentially inject arbitrary SQL. As we will see this is fully exploitable but first let’s consider this code:

create or replace procedure date_proc_2(p_date) is
stmt varchar2(200);
begin
stmt:=’select object_name from all_objects where created = ”’ ||
p_date || ””;
dbms_output.put_line(stmt);
execute immediate stmt;
end;
/

The code here is similar to the code of the first procedure except this time the date is passed as a DATE type parameter. As DATE parameters are thought of as “safe” this procedure would probably not be audited. If we try to perform a typical SQL injection attack here, it fails because the parameter is a DATE and not a VARCHAR:

SQL> exec date_proc_2(”’ and scott.getdba()=1–’);
BEGIN date_proc(”’ and scott.getdba()=1–’); END;
ERROR at line 1:
ORA-01841: (full) year must be between -4713 and +9999, and not be 0
ORA-06512: at line 1

Download