Comments for Securing SQL Server http://securingsqlserver.com Protecting Your Database from Attackers Thu, 26 Apr 2012 14:01:28 +0000 hourly 1 http://wordpress.org/?v=3.3.2 Comment on Other Books by Securing SQL Server 2nd Edition Coming Soon - SQL Server with Mr. Denny http://securingsqlserver.com/other-books#comment-6862 Securing SQL Server 2nd Edition Coming Soon - SQL Server with Mr. Denny Thu, 26 Apr 2012 14:01:28 +0000 http://securingsqlserver.com/?page_id=18#comment-6862 [...] updated everything there for the new edition.  You can always find the old edition listed on the Other Books page on that site or on the Books page on mrdenny.com. .topsy_widget_shortcode,div.topsy-sm [...] [...] updated everything there for the new edition.  You can always find the old edition listed on the Other Books page on that site or on the Books page on mrdenny.com. .topsy_widget_shortcode,div.topsy-sm [...]

]]> Comment on Other Books by Securing SQL Server » Blog Archive » Securing SQL Server 2nd Edition Coming Soon http://securingsqlserver.com/other-books#comment-6831 Securing SQL Server » Blog Archive » Securing SQL Server 2nd Edition Coming Soon Tue, 24 Apr 2012 21:14:21 +0000 http://securingsqlserver.com/?page_id=18#comment-6831 [...] Other Books [...] [...] Other Books [...]

]]> Comment on Chapter 1 of “Securing SQL Server” is now available for free on Amazon. by custom database design http://securingsqlserver.com/chatper-1-of-securing-sql-server-is-now-available-for-free-on-amazon#comment-6070 custom database design Tue, 20 Mar 2012 16:55:24 +0000 http://securingsqlserver.com/?p=52#comment-6070 <strong>custom database design...</strong> [...]Securing SQL Server » Blog Archive » Chapter 1 of “Securing SQL Server” is now available for free on Amazon.[...]... custom database design…

[...]Securing SQL Server » Blog Archive » Chapter 1 of “Securing SQL Server” is now available for free on Amazon.[...]…

]]> Comment on Kindle version of Securing SQL Server is available by mrdenny http://securingsqlserver.com/kindle-version-of-securing-sql-server-is-available#comment-5783 mrdenny Fri, 09 Mar 2012 03:15:30 +0000 http://securingsqlserver.com/?p=6#comment-5783 All you should need to do is attach those files to the SQL Server using the stored procedure sp_attach_db. You can also use SQL Server Management Studio, by right clicking on Databases and select all tasks then select Attach Database. All you should need to do is attach those files to the SQL Server using the stored procedure sp_attach_db. You can also use SQL Server Management Studio, by right clicking on Databases and select all tasks then select Attach Database.

]]> Comment on Kindle version of Securing SQL Server is available by Leisha Modica http://securingsqlserver.com/kindle-version-of-securing-sql-server-is-available#comment-5782 Leisha Modica Fri, 09 Mar 2012 03:09:01 +0000 http://securingsqlserver.com/?p=6#comment-5782 Greetings, I figured you will be able to help me. I have a Microsoft SQL .ldf and .mdf file that I need to restore. Any opinions on how to do this? Cheers Greetings, I figured you will be able to help me. I have a Microsoft SQL .ldf and .mdf file that I need to restore. Any opinions on how to do this? Cheers

]]> Comment on Exposing SQL Server to the public Internet is a pretty bad idea by http://westcampusconnect.asu.edu/?p=1543 http://securingsqlserver.com/exposing-sql-server-to-the-public-internet-is-a-pretty-bad-idea#comment-4214 http://westcampusconnect.asu.edu/?p=1543 Thu, 05 Jan 2012 22:35:31 +0000 http://securingsqlserver.com/?p=90#comment-4214 <strong>Title...</strong> This is my Excerpt... Title…

This is my Excerpt…

]]> Comment on MySQL.com compromised via SQL Injection attack. Someone should have read Chapter 6. by pws frap http://securingsqlserver.com/mysql-com-compromised-via-sql-injection-attack-someone-should-have-read-chapter-6#comment-3028 pws frap Tue, 22 Nov 2011 05:17:11 +0000 http://securingsqlserver.com/?p=62#comment-3028 <strong>pws frap...</strong> [...]Securing SQL Server » Blog Archive » MySQL.com compromised via SQL Injection attack. Someone should have read Chapter 6.[...]... pws frap…

[...]Securing SQL Server » Blog Archive » MySQL.com compromised via SQL Injection attack. Someone should have read Chapter 6.[...]…

]]> Comment on Looks like MySQL isn’t the only company to be succeptable to a SQL Injection Attack (looking at you Barracuda) by Joe L. http://securingsqlserver.com/looks-like-mysql-isnt-the-only-company-to-be-succeptable-to-a-sql-injection-attack-looking-at-you-barracuda#comment-378 Joe L. Wed, 11 May 2011 18:17:49 +0000 http://securingsqlserver.com/?p=75#comment-378 If you only allow your app to hit stored procedures, you can prevent a hacker from running ad-hoc queries through SQL injection. When the web-dev groupo says they need ad-hoc SQL queries, just say no. If you really have to give ad-hoc access, grant it only to a DMZ schema and take care what you put in there. If you only allow your app to hit stored procedures, you can prevent a hacker from running ad-hoc queries through SQL injection. When the web-dev groupo says they need ad-hoc SQL queries, just say no. If you really have to give ad-hoc access, grant it only to a DMZ schema and take care what you put in there.

]]> Comment on Looks like MySQL isn’t the only company to be succeptable to a SQL Injection Attack (looking at you Barracuda) by Ayyappan http://securingsqlserver.com/looks-like-mysql-isnt-the-only-company-to-be-succeptable-to-a-sql-injection-attack-looking-at-you-barracuda#comment-314 Ayyappan Sat, 30 Apr 2011 15:22:35 +0000 http://securingsqlserver.com/?p=75#comment-314 Thank you Denny. Thank you Denny.

]]> Comment on Looks like MySQL isn’t the only company to be succeptable to a SQL Injection Attack (looking at you Barracuda) by mrdenny http://securingsqlserver.com/looks-like-mysql-isnt-the-only-company-to-be-succeptable-to-a-sql-injection-attack-looking-at-you-barracuda#comment-206 mrdenny Tue, 12 Apr 2011 19:42:00 +0000 http://securingsqlserver.com/?p=75#comment-206 This is the catch with SQL Injection, as DBAs we can't protect the databases from SQL Injection. This must be done from the application layer before the data gets to the SQL Server. By the time it gets to the SQL Server it is just to late. I talk about SQL Injection in chapter 6 of "Securing SQL Server", there are lots of other books available on SQL Injection specifically. This is the catch with SQL Injection, as DBAs we can’t protect the databases from SQL Injection. This must be done from the application layer before the data gets to the SQL Server. By the time it gets to the SQL Server it is just to late. I talk about SQL Injection in chapter 6 of “Securing SQL Server”, there are lots of other books available on SQL Injection specifically.

]]>