How To Make Your Queries Perform Like They Used To

Photo by Chad Kirchoff on Unsplash

Watch this week's video on YouTube
In the ideal world, you fully test how your SQL Server will handle upgrading to the latest version.  You're able to catch...

';SELECT *: How Unicode Homoglyphs Can Thwart Your Database Security

For the past couple weeks I've been writing about how to protect your database from a SQL injection attack.  Today, we will keep the trend going by looking at how...

How to Safely Parameterize Table Names

Protecting against SQL Injection Part 2

Watch this week's video on YouTube
Last week we talked about building dynamic SQL queries and how doing so might leave you open to SQL injection...

Warning! Are your queries vulnerable to SQL injection?

Watch this week's video on YouTube
Looking for a script to find possible SQL injection vulnerabilities on your server? Scroll to the bottom of this post.

OWASP names SQL injection as...

How to Search and Destroy Non-SARGable Queries on Your Server

Unexpected SQL Server Performance Killers #3

Watch this week's video on YouTube
In this series I explore scenarios that hurt SQL Server performance and show you how to avoid them. Pulled...

How to Eliminate Ugly Nested REPLACE() Functions

Watch this week's video on YouTube
How many times have you had to transform some column value and ended up stacking several nested SQL REPLACE() functions like this?
-- Input: Red,...

SQLskills is Giving Away Free Training!

SQLskills is giving away free training for their performance tuning and optimization classes. My entry for the competition is below. If you decide to enter for yourself, entries are...

Why Parameter Sniffing Isn't Always A Bad Thing (But Usually Is)

In this series I explore scenarios that hurt SQL Server performance and show you how to avoid them. Pulled from my collection of "things I didn't know I was...

Are your indexes being thwarted by mismatched datatypes?

In this series I explore scenarios that hurt SQL Server performance and show you how to avoid them. Pulled from my collection of "things I didn't know I was...

One SSMS Trick That Will Make You a Faster Query Builder

Watch this week's video on YouTube
Here's the scenario: you copy and paste some code into a query you are building. A few minutes later you need that same snippet...