Jeff Moden

Forum Replies Created

Viewing 15 posts - 33,541 through 33,555 (of 59,099 total)

RE: Does anyone have a good reason to run xp_CmdShell?

Oliiii (6/21/2011)
I can see why xp_cmdshell is useful for a DBA and some maintenance task.
But i don't see why any dev would be allowed to use it?
Do you have an...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 21, 2011 at 8:21 am

#1341870
RE: Does anyone have a good reason to run xp_CmdShell?

GSquared (6/21/2011)
The fact that xp_CmdShell has been enabled means that any attack vector that bypasses your stored procedure [font="Arial Black"]under an elevated rights situation [/font]has essentially been granted full access...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 21, 2011 at 8:15 am

#1341860
RE: Does anyone have a good reason to run xp_CmdShell?

mvillar (6/21/2011)
my only imperative reason: just compatibility, i have 7 sql 2000 servers and i need to...
So what did you use it for there?
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 21, 2011 at 7:15 am

#1341822
RE: Does anyone have a good reason to run xp_CmdShell?

Craig Farrell (6/20/2011)
I know I'm personally horrified at the idea of having my devs write up their own xp_cmdshell with EXECUTE AS permissions as a proc for usage later by...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 21, 2011 at 7:14 am

#1341821
RE: PerfectDisk Vs DisKeeper

Revenant (6/20/2011)
Jeff
This is about what works for you and what you feel comfortable defending to your boss during your performace review.
That is where IMO this or any SqlServerCentral forum ends...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 10:34 pm

#1341596
RE: Selecting list of month numbers between two dates

Heh... No cursor required. I've not finished yet and there are some simple columns you can add that you didn't have in the test data. Comments are in...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 10:15 pm

#1341595
RE: Does anyone have a good reason to run xp_CmdShell?

opc.three (6/20/2011)
I am sure I am not alone in thinking that if you were to decide SSIS was worth your time you would get the most from it and be...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 8:31 pm

#1341587
RE: Does anyone have a good reason to run xp_CmdShell?

opc.three (6/20/2011)
xp_cmdshell can be used by everyone on the instance but that means everyone will assume the identity of the xp_cmdshell proxy account credentials ...
Using the methods that most people...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 8:11 pm

#1341576
RE: Does anyone have a good reason to run xp_CmdShell?

Craig Farrell (6/20/2011)
I disagree that SSIS is the equivalent of xp_cmdshell, as you can heavily restrict what the package, or the agent, can do. SSIS control relies entirely on...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 8:07 pm

#1341574
RE: Does anyone have a good reason to run xp_CmdShell?

GSquared (6/20/2011)
How does that compare with xp_CmdShell being run under elevated rights? It's not the same ballpark. It's not the same league. It's not even the same...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 7:59 pm

#1341570
RE: High CPU, Low Reads

Yasub,
My apologies... :blush: I didn't read your original query quite right. Adding PARTION BY will buy us nothing in this case.
As a bit of a side bar, it is...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 7:46 pm

#1341566
RE: PerfectDisk Vs DisKeeper

matt.newman (6/20/2011)
I am still sided to PerfectDisk, due to the reasons listed below
It seems that you've done more research on the subject than a lot of us have. You...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 7:23 pm

#1341562
RE: Recursive User-Defined Function

I'm definitely for that. Although I can certainly understand why some people might be interested in all the fancy relational and hierarchical calculus, some folks just want a simple...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 7:14 pm

#1341560
RE: What is the output if used more than one DML command on same object at the same time?

Just a word of caution... actually, a warning of danger. 😀 Seemingly innocent table hints such as WITH(NOLOCK) and similar Transaction Isolation Level hints can produce some very incorrect...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 6:48 pm

#1341552
RE: Recursive User-Defined Function

MikeAngelastro-571287 (6/20/2011)
Hi GSquared and Jeff,
Thanks for your kind comments. Jeff, I read both of your links and added a bookmark for each one. They actually contain advice on...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

June 20, 2011 at 6:32 pm

#1341550

Viewing 15 posts - 33,541 through 33,555 (of 59,099 total)