Do your developers really understand how to prevent injection attacks? Or scarier still, how many know what an injection attack is? Chris has some great examples of how sql injection works and how to prevent it.
2004-02-02
17,569 reads
Many of you know that Brian Kelley is our resident security guy. If you didn't, this might prove it! There is a ton of information in this 63 page document worth reading. Let us know what you think.
2004-01-21
774 reads
Joseph gathered together some various bits of code and came up with a solution that lets you do RC4 encryption via the sp_oa~ procedures.
2004-01-09
9,046 reads
Joseph discusses some common and not so common security threats including the possibility of a TSQL virus and bombs planted from within the organization.
2003-12-29
5,839 reads
2003-12-17
2,257 reads
2003-12-15
2,014 reads
Brian is back with a new security article, this time working through the details of the fixed database roles. There are some important concepts here. In particular if you're not totally clear on the difference between dbo and db_owner, read this article.
2007-01-19 (first published: 2003-12-12)
64,316 reads
2003-11-03
2,182 reads
2003-10-15
1,868 reads
This article covers four of the fixed database roles (db_datareader, db_datawriter, db_denydatareader, and db_denydatawriter). If you're new to SQL security (and maybe even if you're not) this article is worth reading.
2003-10-10
10,661 reads
In the previous post, we've built a SQL Server 2025 sandbox in an OrbStack...
By Steve Jones
Thanks to everyone for attending my talk today at Day of data Baton Rouge...
Here’s the scenario: one of my SQL Server instances migrated to the DR array....
WhatsApp:0838-3161-8008 Jl. Pemuda No.90-92, Kembangsari, Kec. Semarang Tengah, Kota Semarang, Jawa Tengah 50133
Yeah, I know this is a 2022 forum, but I don't see a 2025...
I don't see a PowerBI forum, so I'm posting here. I have a need...
Which of these is not true for certificates used for SQL Server connections?
See possible answers