Focuses on advanced techniques that can be used in an attack on an application utilizing Microsoft SQL Server as a backend. These techniques demonstrate how an attacker could use a SQL Injection vulnerability to retrieve the database content from behind a firewall and penetrate the internal network. Also provided are recommendations on how to prevent such attacks.
SQL Server is the best RDBMS, at least according to the current thinking at SQLServerCentral.com, and is fully capable of meeting all of your database needs. However that does not mean you should ignore other platforms. A good DBA will be aware of and perhaps skilled in other platforms and tools, including competing database systems. There has been a lot of buzz about the open source MySQL RDBMS this past year and David Poole takes a look at this server, giving you some points of comparison with
Detailed question/answer paper on deploying SQL Server in a Storage Area Network (SAN) Environment.
One of the most valuable features of SQLServerCentral.com is the discussion forums, where many a DBA has found an answer to their question. Most times on the same day! While we do not moderate the forums, there are still some rules for posting that we hope everyone will take a moment to read.
SQL Server for the most part will maintain itself, updating statistics, choosing optimal query plans, and requiring minimal maintenance to keep running. However to optain optimum performance, a real DBA needs to spend some time checking and tuning indexes, rebuilding them as fillfactors change. This new article from Desiree Harris looks at how you can perform some of these tasks to keep your server performing at the optimum level.
SQL Server is the best RDBMS, at least according to the current thinking at SQLServerCentral.com, and is fully capable of meeting all of your database needs. However not all database systems run on SQL Server and it seems that we often see data from some other system being consolidated on SQL Server for additional processing or reporting. DTS usually handles the load, but there are times that you might want create a linked server to an Oracle system for updating individual rows. New author Adria
A common requirement when building a data warehouse is to be able to get all rows from a staging table where the business key is not in the dimension table. For example, I may want to get all rows from my STG_DATE table where the DateID is not in DIM_DATE.DateID.
Taking a break from SQL Server and DTS, author Haidong Ji shares a few tips and tricks to becoming more productive, whether as a DBA or developer. These hints and tips could help you separate yourself from the pack come review, raise, or interview time.
SQL Server string manipulation using T-SQL leaves lots to be desired. Many postings and complaints about T-SQL deal with strings, but there are ways to work with it. Author Eli Leiba brings us a way to split out portions of a string that contains tokens with a user defined function. Read on to see how this is accomplished and the code used to perform the splitting.
We take a look at each of the major components of a SQL Server's hardware, and examine what can be done to help maximize the performance of your hardware.
By Brian Kelley
I did a post last month titled RTO and RPO are myths unless you've...
By Steve Jones
ioia – n.the wish that you could see statistics overlaid on every person you...
By Steve Jones
I love Chicago. I went to visit three times in 2023: a Redgate event,...
First off, my apologies for what could potentially be a bad title! I am...
I've inherited a couple of rather large databases from my ex-colleague when I join...
Comments posted to this topic are about the item Identifying Customer Buying Pattern in...
I have marked a few transactions in my code. How can I find out which marks were stored in a transaction log?
See possible answers