This month's discount Comprehensive Database Performance Health Check · Testimonials
SQLAuthority with Pinal Dave
Home
  • Consulting
    • Health Check
  • Free Videos
  • All Articles
    • AI
    • SQL Performance
    • SQL Tips and Tricks
    • Interview Questions and Answers
    • SQL Puzzle
    • SQL Video
    • SQLAuthority News
    • Personal
  • Books
  • Consulting
A muscular security officer with a stern expression.

SQL SERVER – Importance of User Without Login

September 29, 2012
Pinal Dave
SQL Tips and Tricks
SQL Login, SQL Server, SQL Server Security

Some questions are very open ended. Here is one question I was asked in recent User Group Meeting about user without login.

Read More
SQL Server logo.

SQL SERVER – Beginning of SQL Server Architecture – Terminology

August 30, 2012
Pinal Dave
SQL Tips and Tricks
SQL Server, SQL Server Architecture, SQL Server Security, SQL Training

Beginning SQL Server Architecture: my friend Anil Kumar explains the basic terms and the main parts, the Relational Engine, Storage Engine and SQL OS.

Read More
SQL SERVER - Beginning of SQL Server Security

SQL SERVER – Beginning of SQL Server Security

August 2, 2012
Pinal Dave
SQL Tips and Tricks
SQL Scripts, SQL Server, SQL Server Security

The beginning of SQL Server security: how authentication, logins, users and permissions work together to keep your data safe from misuse.

Read More
A narrow fabric tape stretches between two fixed clips with cloth extending outside both ends

Time-Limited Access: Expiring Grants With a Valid-Until Column

July 21, 2012
Pinal Dave
SQL Tips and Tricks
SQL Constraint and Keys, SQL DateTime, SQL Server Security, SQL View

A ValidUntil column does nothing by itself. Here is how to make the read path enforce it, with a demo you can run.

Read More
SQL Server role mappings.

SQL SERVER – Solution – User Not Able to See Any User Created Object in Tables – Security and Permissions Issue

June 19, 2012
Pinal Dave
SQL Tips and Tricks
SQL Server Security

A friend could connect to SQL Server but could not see any user created object, while his colleague could. It was a security and permissions issue.

Read More
A pepper mill holds peppercorns above its mechanism with an unsuitable pebble caught before grinding

Second-Order SQL Injection: When Stored Data Becomes Code

May 30, 2012
Pinal Dave
SQL Tips and Tricks
Dynamic SQL, SQL Server Security, SQL String, SQL Variable

A safe insert does not make the saved value safe forever. Here is how stored text turns into code later, and the plain fix.

Read More
A pastry crimper seals a pie edge through its fixed toothed shape beside unused decorative cutters

Dynamic ORDER BY Without Injection: Whitelisting Sort Columns

May 9, 2012
Pinal Dave
SQL Tips and Tricks
Dynamic SQL, SQL Order By, SQL Server Security, SQL Variable

Parameters cannot name a column, so grids end up gluing text into SQL. Here is the approved-list pattern that keeps the sort safe.

Read More
Previous 1 … 31 32 33 34 35 36 37 … 56 Next
  • Books
  • Testimonials
  • Privacy Policy

© 2006 – 2026 All rights reserved. pinal @ SQLAuthority.com