Use parameterized queries from application code to prevent SQL injection, improve plan reuse, and avoid parameter length mistakes.
Finding Dynamic SQL Open to Injection
Find dynamic SQL open to injection by searching module definitions for concatenation, then replace data concatenation with parameters.
A Quarterly Permission Review
A quarterly permission review checks server and database roles, new grants, orphaned users, service accounts, and owner signoff.
Least Privilege for Application Logins
Design least privilege for SQL Server application logins with roles, schema permissions, and stored procedures, then test real workflows.
SQL SERVER 2005 – FIX Error: 18456 : VISTA Windows Authentication
My Vista Windows Authentication login failed with Error 18456 after installing SQL Server 2005, while sa worked. Adding my login as administrator fixed it.
Using Synonyms to Simplify Cross-Database Queries
Using synonyms can hide a cross-database object name from callers, but permissions, dependency checks, and deployment still need care.
SQL SERVER – SQL Slammer (Computer Worm)
Is there any virus associated with SQL Server? A DBA’s question led me to SQL Slammer, the computer worm that slowed down Internet traffic in January 2003.