Viewing 15 posts - 33,736 through 33,750 (of 59,099 total)
Hi Elliott,
This is a demo of the hack to penetrate cmd.exe privs. I've used the well known xp_regwrite to simulate the hack. Details are in the comments in...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 10, 2011 at 8:16 pm
LutzM (6/9/2011)
GilaMonster (6/9/2011)
I post too much.
Congrats, Gail!!
And thank you for continuously sharing your knowledge!
Ditto that! Congratulatios, Gail!
--Jeff Moden
Change is inevitable... Change for the better is not.
June 10, 2011 at 12:33 pm
You hit my favorite 2 spots for SQLCLR usage... text manipulation and file handling.
When I get home tonight, I'll try to setup an example where OPENROWSET makes a call to...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 10, 2011 at 12:22 pm
mohammed moinudheen (6/10/2011)
Try to use sqlcmd and bcp the values from the files in the C folder
vultar (6/10/2011)
Sounds to me like a job for powershell.
Do either of you have a...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 10, 2011 at 8:18 am
Elliott Whitlow (6/10/2011)
I agree that you can use xp_cmdshell in a *more* secure way but I just don't want to risk it. Maybe thats just me.. Mileage may...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 10, 2011 at 8:12 am
Stringzz (6/7/2011)
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 9:26 pm
opc.three (6/9/2011)
Jeff Moden (6/8/2011)
opc.three (6/8/2011)
Elliott Whitlow (6/7/2011)
On most of my systems I disable xp_cmdshell and don't allow its use..+1000
-1000 😉
Why all the FUD about xp_CmdShell? Done properly, it's an...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 9:05 pm
Elliott Whitlow (6/9/2011)
I have to fundamentally disagree. xp_cmdshell allows you to run commands in the same context as the SQL server, now depending on the user and the...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 8:35 pm
Carlos Gonzalez-213247 (6/7/2011)
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 6:03 am
skcadavre (6/8/2011)
m_cg (6/7/2011)
Jeff,Still not sure of the format, but gave it 2 ways. Does this work for you?
What Jeff's talking about is using a Tally table.
e.g.
DECLARE @date DATETIME, @number INT
SET...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 5:56 am
forsqlserver (6/9/2011)
ForSqlServer+919953076787(If SQL SERVER is in trouble)
It's not likely that folks will call that number when "SQL Server is in trouble" because most people like DBA's that can use Google...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 5:21 am
catherine (6/9/2011)
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 5:14 am
PaulB-TheOneAndOnly (6/9/2011)
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 5:03 am
Animal Magic (6/9/2011)
Jeff Moden (6/9/2011)
An OPENROWSET through either JET or ACE drives will handle this automatically.
Thanks Jeff. ill take a look at that also.
I think i have managed to...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 4:56 am
PaulB-TheOneAndOnly (6/8/2011)
General structure should looks like:
SELECT
list-of-colums-to-be-returned
FROM
list-of-tables
WHERE
...
--Jeff Moden
Change is inevitable... Change for the better is not.
June 9, 2011 at 4:30 am
Viewing 15 posts - 33,736 through 33,750 (of 59,099 total)