SQL Injection - Part 1

Randy says that the biggest reason we have so many injection vulnerabilities is that all the asp books use inline sql for their examples! We STILL encounter developers who don't understand injection. Read and pass on to your dev team.

SQL Server Web Data Administrator

The Web Data Administrator is a utility program implemented in ASP.NET that enables you to easily manage your SQL Server data wherever you are. Using its built-in features, you can do the following from Internet Explorer or your favorite Web browser:

Create and edit databases in Microsoft SQL Server 2000 or Microsoft SQL Server 2000 Desktop Engine (MSDE)
Perform ad-hoc queries against databases and save them to your file system
Export and import database schema and data

Worst Practice - Triggering External Events

Andy Warren started his worst practice series some time ago with the intention of looking at the worst things you can do. Given that we may not always be able to implement the best practices, at least we can try to avoid doing things harm the system or decrease performance. This article continues the series and looks at an item I see mentioned in our discussion forum quite often, triggering external events. From a trigger.

Embarcadero ER/Studio and DT/Studio Named Finalists for JOLT Product E

Press release about Embarcadero products being named finalists in the annual Jolt awards sponsored by Software Development magazine.

Help us Improve our Logo

Reader Rob Potter suggested that our logo could use some fine tuning and graciously submitted some ideas he had for doing just that. Come take a look and tell us what you think.

Take a Break with Pingu

It's not SQL Server related, but take a break and see how you do. The highest I've seen so far is 1602. If you beat it send a screen shot (small, please) to sjones@sqlservercentral.com

Worst Practice - Adding a Column Without Thinking!

Adding a column is one of the simpler tasks you'll ever do as a DBA, yet danger lurks! All too often we add columns without going through some type of check list to make sure we're safe. What could adding a column break? You might be surprised!

Review of ApexSQL Log

Brian has been busy lately helping us with content for our magazine (you have checked out www.sqlserverstandard.com haven't you?) but he's back this week with a great write up a new product that let's you read from the transaction log.

Review of Transact SQL Desk Reference

Looking for a good (or another) TSQL reference? This might be the one. Bruce took a good look at it and points out both the good and the bad.

Quest Releases TOAD for SQL - Freeware!

Quest Software has recently released TOAD for SQL Server, a freeware version of its highly popular Oracle tool - TOAD