Searching for "sa = blank" in stored procs

• Barkingdog

  SSCoach

  Points: 18670

  More actions

  November 13, 2001 at 10:20 am

  #57541

  Our SQL 7 database has tons of stored procs with "sa" = "blank". How can I find (other than manually) all stored procs that have the "sa" password hardcoded? 0

  TIA,

  Bill

• Steve Jones - SSC Editor

  SSC Guru

  Points: 738347

  More actions

  November 13, 2001 at 10:25 am

  #420063

  You can search syscomments if you have rights using

  select *

  from syscomments

  where text like '%sa= %'

  Then kick the developers in the a**!

  Steve Jones

  steve@dkranch.net

• nigelrivett

  SSCertifiable

  Points: 5472

  More actions

  November 13, 2001 at 7:14 pm

  #420078

  Another way is to script all the SPs and search the files (easy if you use sourcesafe then you will already have the files and lots of other benefits).

  Or you can just set an sa password and tell the developers to fix their code before they go for the project drink.

  
  Cursors never.
  DTS - only when needed and never to control.