Microsoft warns of a rise in SQL Injection attacks on ASP and ASP.NET sites that skip secure coding. Verifying user data input is the key defense.
SQL SERVER – 2008 – High Availability – Hot Add CPU
Hot Add CPU in SQL Server 2008 is a cool high availability feature, but it needs supporting hardware and 64-bit Windows Server 2008 Enterprise or Datacenter.
SQL SERVER – Difference Between DBMS and RDBMS
What is the difference between DBMS and RDBMS? An RDBMS adds tables with enforced relationships, plus the constraints and security a plain DBMS lacks.
SQLAuthority News – Famous Quotes From Bill Gates – Part 2
More famous quotes from Bill Gates, as readers asked: on unhappy customers, the Internet, spam and life not being fair. A little fun never hurts.
SQLAuthority Download – SQL Server Cheatsheet
Readers often ask for a SQL Server cheat sheet. Here is the one page cheatsheet I use every day with my team. Download it, print it and keep it handy.
SQLAuthority News – Microsoft Source Code Analyzer for SQL Injection
Microsoft Source Code Analyzer for SQL Injection scans ASP code for SQL Injection vulnerabilities. Here are the steps to download and install it.
SQLAuthority News – Release Notes for SQL Server 2008 Release Candidate 0
Release Notes for SQL Server 2008 Release Candidate 0 (RC0) are out. They add to the RC0 Readme and Books Online, and you can download them from Microsoft.
SQL SERVER – Create Check Constraint on Column
A junior developer wrote a trigger to block invalid data. A Check Constraint is simpler. My example limits PostalCode length in AdventureWorks and tests it.
SQLAuthority News – White Paper: Security Overview for Database Administrators
Security Overview for Database Administrators is a Microsoft white paper on SQL Server 2008 security: secure setup, permissions, encryption and auditing.
SQL SERVER – Find Current Identity of Table
Many developers use MAX() to find the current identity of a table. I prefer DBCC CHECKIDENT, which reports the current identity value directly.