Guarding Against SQL Injection at the Database Layer (SQL Server)
This article presents a way to check and validate input before using it in your dynamic SQL queries to prevent SQL Injection problems.
2026-03-02
4,721 reads
sql injection
A Guide to SQL Security in Django
If you encounter Django in your environment, are you thinking about SQL Injection and security? If not, read this article and learn how to protect your data.
2024-11-01
1,191 reads
Prevent SQL Injection
SQL Injection continues to be a problem and Steve has a few thoughts today on how to reduce your vulnerabilities.
2024-08-14
264 reads
Protecting Yourself from SQL Injection in SQL Server - Part 2
Aaron Bertrand has some advice on how to protect yourself from SQL Injection, looking at some specific common scenarios.
2015-06-09
4,756 reads
SQL Injection: How it Works and How to Thwart it
This is an extract from the book Tribal SQL. In this article, Kevin Feasel explains SQL injection attacks, how to defend against them, and how to keep your Chief Information Security Officer from appearing on the nightly news.
2014-05-13
6,136 reads
An Extra Defense For SQL Injection Attacks
TDSe-cure is a proxy service to SQL Server to block SQL injection attacks.
2009-01-07
3,044 reads
Blogs
PostgreSQL Support in the Data API Builder
By Steve Jones
Next week I’m at VS Live in San Diego (register and join me) and...
Ten Years of PowerShell
Ten years ago today, I filmed a Pluralsight Play by Play on open source...
T-SQL Tuesday #202: 100 Hours
By Steve Jones
It’s time for T-SQL Tuesday again and this is a great prompt to start...
Forums
Stored Procedures for Server-Level Object and Column Search
Comments posted to this topic are about the item Stored Procedures for Server-Level Object...
Databricks Genie Spaces for SQL Analysts: Natural Language Querying Without Leaving Your Data Platform
Comments posted to this topic are about the item Databricks Genie Spaces for SQL...
The Costs of Multiple Platforms
Comments posted to this topic are about the item The Costs of Multiple Platforms
Question of the Day
RegEx Functions II
I have this data in a table in a SQL Server 2025 database:
EmailAddressID EmailAddress 7 dylan0@ADVENTURE-WORKS.COM 8 Diane1@ADVENTURE-WORKS.COMIf I run this query, which row(s) are returned?
SELECT top 10 * FROM person.EmailAddress WHERE REGEXP_LIKE(EmailAddress, '^d') AND BusinessEntityID IN (7,8)See possible answers