SQL Injection makes a good joke and a terrible incident. The tests here show a concatenated query returning every row for one hostile name, the same text passed as a parameter returning none, a table name caught by QUOTENAME, and a read-only user blocked from dropping a table.
OLE DB or ODBC for Connecting to SQL Server
Choose OLE DB or ODBC for SQL Server by the component you run, especially SSIS, linked servers, and applications using current drivers.
SQL SERVER – 2008 – TRIM() Function – User Defined Function
SQL Server 2000, 2005 and 2008 have no TRIM() function, but LTRIM and RTRIM together do the job. Here is a simple UDF that trims both sides at once.
SUBSTRING Boundaries: Start at Zero, One or Beyond
SUBSTRING boundaries distinguish start zero, start one and positions past the end. Read empty strings, shortened counts and typed NULL results.
SWITCHOFFSET Versus TODATETIMEOFFSET: Two Offset Operations
SWITCHOFFSET versus TODATETIMEOFFSET depends on the input contract. Preserve a known instant or attach an offset to a genuinely local clock.
SQLAuthority News – Author Visit – SQL Hour at Patni Computer Systems
Our user group’s first SQL Hour at Patni Computer Systems, Gandhinagar: Jacob Sebastian on Query Optimization Basics and my session Know your SQL.
Renaming or Disabling the sa Login
Renaming or disabling the sa login requires a dependency inventory, tested alternate admin access, and monitoring after the change.