How to secure legacy ASP.NET MVC against Cross-Site (CSRF) Attacks

CSRF is when an attacker submits unauthorized commands to a website user already logged in. In layman’s terms, When you click on a malicious hyperlink, it triggers scripts that perform actions on your behalf to your logged-in bank website. Viola, the attackers, have your money.

Sessions for Summit 2023 are now LIVE!

The wait is finally over. This year’s PASS Data Community Summit sessions are now live!

Database Monitoring for Developers

Database monitoring is an essential part of database development and testing because it will reveal problems early and allow you to drill down to the root cause, as well as look for any worrying trends in behavior of the database, when under load. If you are delaying doing this until a database is in production, you're doing it wrong.

Working with SQL Server Stored Procedures and .NET

There is more than one way to work with SQL Server stored procedures from within a .NET Application. However, when using parameters, in order to avoid exposing your code to "SQL Injection" vulnerabilities, there is a certain way based on which you should write your code.

Import Text and CSV Files into SQL Server Database with SSIS Script Task

There are several techniques available to import and export data for SQL Server. In addition, there are free SQL tools and utilities available that might be helpful for specific use cases. In SQL Server Integration Services (SSIS), we can use a Flat File Source to load Text/CSV files. Despite this, I would like to demonstrate how to import Text/CSV files using the Script Task.

Managing Test Data for Database Development

In coming up with a strategy for managing test data, first you need to understand what the many test requirements are likely to be for the particular database you are developing. Next, you need to create all the different categories of test data required to suite test requirements and, finally, work out how to manage it in a way that allows a test-driven approach to development.

Read more in this latest article from Phil Factor

PostgreSQL Schema: Learning PostgreSQL with Grant

An important aspect of building and managing a database is organizing the objects within your database. You may have tables that support different functions, for example, a schema for warehousing operations and another for sales. Some logins may need access to some tables, but not others. You might want to isolate one set of objects within a database from other sets of objects. All of this, and more, can be accomplished using schemas within a database and PostgreSQL supports the use of schema for just these types of functions.

Dive into RDS Custom for SQL Server - Leverage your existing licenses and high availability

RDS Custom for SQL Server recently released exciting new features related to Bring Your Own Media (BYOM) and High Availability. By using BYOM, customers may leverage their existing SQL Server licenses with Amazon RDS Custom for SQL Server, when used in accordance to Microsoft terms. This allows customers who have already purchased SQL Server licenses to save on TCO/license costs, while offloading the undifferentiated heavy lifting of database management to Amazon RDS Custom. By using Multi-AZ deployment, customers can now set up high availability for their databases.

Managing the challenge of migrating to the cloud

Migrating to the cloud has many advantages… until you’re the one tasked with making it happen. There are a lot of considerations, and the key is to break it down into four steps, not one. Find out how you can manage the challenge of migrating to the cloud.

Data Transfer from Azure Blob Storage to Snowflake Using Pipelines

One of the premises of a modern warehouse is to be able to interconnect cloud services and process and analyze data from any provider with ease. Two of the top cloud services right now are Azure Synapse and Snowflake. Whatever your organization is implementing or if you need to transfer data from/to those services, it is important to know how to interconnect them and be able to transfer data between services.