Forum Replies Created

Viewing 15 posts - 511 through 525 (of 49,552 total)

  • RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

    juniorDBA13 - Wednesday, January 3, 2018 6:04 AM

    Yes but we support a number of databases and dont have time to check every...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Intermittent problem. Not all data is getting through to the database.

    Unlikely to be a network problem. SQL's behaviour on data modifications is all or nothing. If an insert fails, it fails, it doesn't succeed and leave some columns NULL.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

    The easiest (and safest) is to assume that all dynamic SQL is vulnerable, unless proven otherwise.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

    Anything that concatenates user input into a string and executes the resulting string is vulnerable. That includes user input that got stored in the database and then used to build...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Are the posted questions getting worse?

    Thom A - Wednesday, January 3, 2018 5:34 AM

    Poor Gail, it's going to be as hot as 33C on Saturday and...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Is My Foreign Key Table Unnecessary?

    Phil Stratford - Wednesday, January 3, 2018 3:47 AM

    You're absolutely right that a sixth, seventh or even eighth value could be...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Are the posted questions getting worse?

    Brandie Tarvin - Wednesday, January 3, 2018 3:19 AM

    Does anyone feel sorry for me yet?

    https://weather.com/weather/today/l/USFL0228:1:US

    Bridges are supposed to start freezing sometime...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: create procedure gets stuck on select

    No, that's declaring variables. (and no idea what the unknown language is doing)

    Please have a look at the T-SQL documentation for creating procedures: https://docs.microsoft.com/en-us/sql/t-sql/statements/create-procedure-transact-sql

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: SQL Server Over Partition

    Table definitions and sample data please.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Only show the latest date in a selection of data

    GilaMonster - Tuesday, January 2, 2018 8:38 AM

    Please post table definitions and sample data (as INSERT statements) if you want a query...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Only show the latest date in a selection of data

    Please post table definitions and sample data (as INSERT statements) if you want a query written.

    If you just want advice, then you can use ROW_NUMBER, partition by ContactID...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Case sensive search using IN in a case statement.

    Collation won't allow SQL to return NOT ALLOWED if you filter for ALLOWED.
    There's no filter for 'APPROVED' vs 'NOT APPROVED' in the WHERE clause, so SQL will return...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: SQL Server Over Partition

    Table definitions please (as CREATE TABLE statement). And, if you look at the link, sample data is best as INSERT statements, so that testing queries is easy.
    What is the...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: Is My Foreign Key Table Unnecessary?

    Your preference.

    If you drop the lookup table, make sure that you add constraints to the column. "Integrity enforced in the application" = "Garbage data eventually"
    Also consider that ...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • RE: SQL Server Over Partition

    As Piet pointed out in your previous thread, people in general are not too keen on downloading excel spreadsheets. Please can you list your sample data and expected results as...

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

Viewing 15 posts - 511 through 525 (of 49,552 total)