Guarding Against SQL Injection at the Database Layer (SQL Server)
This article presents a way to check and validate input before using it in your dynamic SQL queries to prevent SQL Injection problems.
This article presents a way to check and validate input before using it in your dynamic SQL queries to prevent SQL Injection problems.
Four years ago I wrote a blog on this site explaining why Python is better than C# and, arguably, most other programming languages. To redress the balance, here are 10 reasons why you might want to avoid getting caught up in Python’s oh-so-tempting coils – particularly when building large, long-lived systems.
Introduction. Why AI Readiness Starts in the Database You probably don’t need machine learning today. Most organizations don’t. You already have reporting dashboards, operational workflows, and business intelligence that work just fine without neural networks or predictive models. That’s not a failure. It’s normal. The problem doesn’t show up immediately. It shows up a few […]
Steve reminisces on some of the fun times he's had at SQL Server Central.
Beginning with SQL Server Management Studio 21, Microsoft stopped providing the direct download package/binaries to install SSMS, instead it just downloads the SSMS installer. This installer then starts the installation of SSMS and downloads what is needed to install SSMS. Sometimes there may be a need to do an offline installation where you do not have access to the internet. In this article, we walk through the steps to do an offline install of SSMS.
In this next installments of the Modern Fabric Data Warehouse, we look at tools for developers.
Now that SQL Server 2025 has finally been released to the public, I was finally able to test and learn a lot about this command (named CREATE EXTERNAL MODEL), and I want to share my knowledge with you here. If you’re new to the world of AI, don’t worry, we’ll start with the basics and evolve to where this command fits in!
As Steve uses AI more, it seems determinism isn't something you get out of many LLMs.
Learn about transaction ID wraparound in PostgreSQL, which caused a problem for the author.
By Brian Kelley
I am guilty as charged. The quote was in reference to how people argue...
By Steve Jones
Learn how to tie a bowline knot. Practice in the dark. With one hand....
By HeyMo0sh
As a DevOps practitioner, I’ve always focused on performance, scalability, and automation. But as...
Hi, I have a SQL Server instance where users connect to via Windows Authentication,...
Comments posted to this topic are about the item Multiple Deployment Processes
Comments posted to this topic are about the item How to Use sqlpackage to...
I have a query from a former DBA that we run on SQL Server 2025 to check on database metadata. This query references sys.sysaltfiles. I want to refactor this code to be more modern. Which DMV should I reference instead?
See possible answers