Forum Replies Created

Viewing 15 posts - 27,091 through 27,105 (of 59,101 total)

  • RE: Is xp_cmdshell Security threat???

    WayneS (6/22/2009)

    rambilla4 (6/22/2009)

    Hi,

    We are using xp-cmdshell for deleting old backups. But I heard that xp_cmdshell is a big security threat for SQL Server. Is it true?

    That depends. Do you consider...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 6, 2013 at 12:35 pm

    #1604232

  • RE: Script for services installed SQL Server

    I've not had the need to do it myself but, if I did, I'd do a search for "Hey Scripting Guy". It's a website loaded with example PowerShell scripts...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 5, 2013 at 7:38 am

    #1603903

  • RE: How to get all 7 days Name in One table.

    bvenkannababu (4/4/2013)

    Hi try ISnull function in sql Query isnull(columnname,'0') something like this

    That won't work for missing days unless you have a reference (like a Calendar table or Tally...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 5, 2013 at 7:26 am

    #1603893

  • RE: Function for similar phrases

    deepzzzz (4/5/2013)

    Thanks Sean for your post..

    For this example it works fine..

    Just consider these examples...

    'US Eastern District Court'

    'Southern District Court of US'

    For this also it is giving the same value....

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 5, 2013 at 7:16 am

    #1603888

  • RE: Development, Operations, or Accounting

    Jim P. (4/4/2013)

    Jeff Moden (4/4/2013)

    For example, if you have some performance challenged code that uses a huge number of resources because someone simply used DISTINCT to get past an accidental...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 5, 2013 at 7:09 am

    #1603880

  • RE: How to preserve global temporary table data

    Lynn Pettis (4/4/2013)

    Software doesn't "know" anything, it simply does what you tell it to do. It may follow algorithms to determine the best way to accomplish a task, but...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 4, 2013 at 10:30 pm

    #1603797

  • RE: The Command Shell

    opc.three (4/4/2013)

    Eric M Russell (4/4/2013)

    Case in point: Just this morning I was asked to rename a database (AbcCorp -> AbcCorpOld) in the DEV and QA environments and then...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 4, 2013 at 10:03 pm

    #1603792

  • RE: Development, Operations, or Accounting

    One of the things that's usually implied or even explicitly expressed about using cloud services, such as Azure, is that you no longer need the expense of a DBA. ...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 4, 2013 at 8:47 pm

    #1603788

  • RE: The Command Shell

    Jim P. (4/3/2013)

    The argument over whether xp_cmdshell is a threat means that someone, with decent knowledge, is already so far in it doesn't matter. Now I catch a programmer doing...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 4, 2013 at 7:59 am

    #1603566

  • RE: HierarchyID performance problems... Really???

    princerastogi (4/4/2013)

    I used this but only on my Test Box, With small data. I think no problem will be there if we will use indexes for both depth first search...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 4, 2013 at 7:42 am

    #1603560

  • RE: A Hazard of Using the SQL Merge Statement

    I guess I understand the concern some folks have with the title but I personally don't see a thing wrong with it. If you're not aware of what is...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 3, 2013 at 10:45 pm

    #1603429

  • RE: The Command Shell

    Steve Jones - SSC Editor (4/3/2013)

    There is a potential issue for injection attacks as TravisDBA pointed out....

    I brought it up in a post before that, as well.

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 3, 2013 at 5:11 pm

    #1603406

  • RE: The Command Shell

    Arjen Krap (4/1/2013)

    So, if I understand correctly, the only use of turning off xp_cmdshell is to remind database administrators that is company policy not to use xp_cmdshell.

    I also read on...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 2, 2013 at 5:39 am

    #1602748

  • RE: The Command Shell

    Your Name Here (4/1/2013)

    I apologize for being late to the party. Typically I'd quietly read but I'd like to post my thoughts even though I'm not at the level...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 1, 2013 at 10:57 pm

    #1602661

  • RE: The Command Shell

    opc.three (3/30/2013)

    That's just the thing. The "only if" is specific to ones environment and is irrelevant to the point. With xp_cmdshell, you do not even have the option to properly...

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

    April 1, 2013 at 10:38 pm

    #1602657

Viewing 15 posts - 27,091 through 27,105 (of 59,101 total)