Jeff Moden

Forum Replies Created

Viewing 15 posts - 13,261 through 13,275 (of 59,101 total)

RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

GilaMonster - Wednesday, January 3, 2018 11:21 AM
sp_statement_completed & sql_statement_completed and look for sp_executesql or EXEC with brackets.
Or the entire batch with...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 12:26 pm

#1974318
RE: The Case of the Shrinking CFO, err Database

Ray Herring - Wednesday, January 3, 2018 11:10 AM
Jeff Moden - Wednesday, January 3, 2018 10:23 AM
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 12:20 pm

#1974316
RE: No Magical DevOps

To me, DevOps has absolutely nothing to do with helping to deploy code any faster or automating anything, although that's frequently the end result of a proper development and support...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 12:13 pm

#1974313
RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

grant@scarydba.com - Wednesday, January 3, 2018 8:53 AM
juniorDBA13 - Wednesday, January 3, 2018 7:05 AM
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 10:49 am

#1974288
RE: Are the posted questions getting worse?

Brandie Tarvin - Wednesday, January 3, 2018 9:34 AM
We don't turn off our AC until about mid-December and then it's back on...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 10:28 am

#1974282
RE: The Case of the Shrinking CFO, err Database

Ray Herring - Wednesday, January 3, 2018 9:57 AM
Three different points.
A.) It is not the DBA's job to convince the CFO and...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 10:23 am

#1974280
RE: Restarting SQLServerAgent

Eliyahu - Wednesday, January 3, 2018 7:23 AM
Since I have jobs and stored procedures that need to write to network locations, I...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 8:12 am

#1974235
RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

The bottom line for all of the recommendations is that although you can easily find all of the places where dynamic SQL has been used, it's going to take a...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 8:05 am

#1974233
RE: Is there a way to identify dynamic sql that may be vulnerable to sql injection?

juniorDBA13 - Wednesday, January 3, 2018 6:04 AM
Yes but we support a number of databases and dont have time to check every...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 6:53 am

#1974213
RE: An Introduction to PowerShell for a DBA

Alex Chamchourine - Tuesday, January 2, 2018 6:08 PM
Jeff Moden - Tuesday, January 2, 2018 2:31 PM
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 3, 2018 at 6:40 am

#1974209
RE: create procedure gets stuck on select

Senchi - Tuesday, January 2, 2018 7:19 PM
CREATE PROCEDURE sp_cenik
as begin
DECLARE
@OD DATETIME,
@do DATETIME,
@TipSobe VARCHAR(6),
@KodaCenika INT,
@Sezona INT
SELECT
@Od = :a2,
@do = :a3,
@TipSobe =...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 2, 2018 at 7:39 pm

#1974156
RE: Understanding Your Value

Steve Jones - SSC Editor - Tuesday, January 2, 2018 9:01 AM
ZZartin - Tuesday, January 2, 2018...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 2, 2018 at 5:12 pm

#1974149
RE: Why Haven’t You Upgraded SQL Server?

g.britton - Friday, December 29, 2017 2:55 AM
Kathi Kellenberger - Saturday, December 23, 2017 11:22 AM
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 2, 2018 at 5:03 pm

#1974147
RE: Are the posted questions getting worse?

drew.allen - Tuesday, January 2, 2018 11:48 AM
A situation came up...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 2, 2018 at 2:57 pm

#1974138
RE: Is the old stuff worth learning?

Eric M Russell - Tuesday, January 2, 2018 9:59 AM
First, understand how a specific technology (new or old) fits into the overall...
--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

January 2, 2018 at 2:45 pm

#1974136

Viewing 15 posts - 13,261 through 13,275 (of 59,101 total)