Additional Articles


Technical Article

Manipulating Microsoft SQL Server Using SQL Injection

Focuses on advanced techniques that can be used in an attack on an application utilizing Microsoft SQL Server as a backend. These techniques demonstrate how an attacker could use a SQL Injection vulnerability to retrieve the database content from behind a firewall and penetrate the internal network. Also provided are recommendations on how to prevent such attacks.

2005-01-05

2,626 reads

External Article

Clustering for Indexes

There is nothing spectacular about using indexes per say. However, on many occasions I have come across a variety of SQL coders that never consider validating that the index they think they are using is efficient or even being used at all. We can all put indexes on the columns that we think will be required to satisfy individual queries, but how do we know if they will ever be used. You see, if the underlying table data is constructed, contains, or is ordered in a particular way, our indexes may never be used. One of the factors around the use of an index is its clustering factor and this is what this article is about.

2004-12-23

3,412 reads

Blogs

Microsoft Build 2026 announcements

By

Once again there were a number of Microsoft Build announcements related to data and...

T-SQL Tuesday #199: Roundup

By

A good week ago I hosted the monthly T-SQL Tuesday blog party. I invited...

No Shortcuts for the SQLCMD Batch Terminator: #SQLNewBlogger

By

I was messing around with SQLCMD and I realized something I hadn’t known. I’ve...

Read the latest Blogs

Forums

Increment a number in a SQL Query based on a value

By bswhipp

I have an issue where I have a Bill of Material list of items...

Follow Your Hunch

By Steve Jones - SSC Editor

Comments posted to this topic are about the item Follow Your Hunch

What Happens When You Ask a Local AI to Query Your Database?

By Kumar Abhishek

Comments posted to this topic are about the item What Happens When You Ask...

Visit the forum

Question of the Day

Detecting Characters

I have a SQL Server 2022 English default installation on a server. I want to detect if there are any upper case characters in rows and I have this code:

SELECT CustomerNameID,
       CustomerName
 FROM dbo.CustomerName
 WHERE CustomerName = LOWER(CustomerName)
Here is the sample data I am testing with:
CustomerNameID CustomerName
1              John Smith
2              Sarah Johnson
3              MICHAEL WILLIAMS
4              JENNIFER BROWN
5              david jones
6              emily davis
7              Robert Miller
8              LISA WILSON
9              christopher moore
10             Amanda Taylor
How many rows are returned?

See possible answers