SQL Clone
SQLServerCentral is supported by Redgate
Log in  ::  Register  ::  Not logged in

Bert Wagner

Bert Wagner is a Business Intelligence Developer at Progressive Insurance. He enjoys solving challenging data transformations with T-SQL and optimizing for query performance. In addition to BI development, Bert loves building ASP.NET MVC web apps and building Internet of Things projects.

Archives: March 2018

AT TIME ZONE: The easy way to deal with time zones and daylight savings time

Many people think daylight savings time was created to help align the hours that the sun is up with our waking hours so farmers and school children didn’t have to be outside in the dark.  Or something like that.

Well let me fill you in on a little secret –… Read more

5 comments, 4,177 reads

Posted in Bert Wagner on 27 March 2018

How To Steal Data Using Second Order SQL Injection Attacks

One misconception some people have about SQL injection is that it can only happen when concatenating a user input parameter directly into your dynamically built query string:

While this type of injection flaw is easy to spot, there are other less direct ways an injection attack can occur.

Second Order…

Read more

0 comments, 4,374 reads

Posted in Bert Wagner on 20 March 2018

Full Automatic Tuning: SQL Server 2026’s Most Killer Feature

This post is a response to this month’s T-SQL Tuesday #100 prompt by the creator of T-SQL Tuesday himself, Adam Machanic.   T-SQL Tuesday is a way for SQL Server bloggers to share ideas about a different database or professional topic every month.

This month I’m going down the science… Read more

1 comments, 262 reads

Posted in Bert Wagner on 13 March 2018

2.5 Ways Your ORM Is Vulnerable To SQL Injection

Someone recently told me that they don’t need to worry about SQL injection because they are using an ORM.

Oh boy.

ORMs don’t automatically prevent SQL injection

Object-relational mapping (ORM) tools allow developers to easily access an application’s data layer without having to write lots of redundant code.


Most… Read more

0 comments, 2,619 reads

Posted in Bert Wagner on 6 March 2018