Monthly Archives: April 2011

Why Use the Principle of Least Privilege?

SQL Injection is not the fault of the SQL Server. Brian Kelley pointed that out, and reminded me that SQL Injection isn’t an case of malformed SQL. It’s legitimate code, including SQL commands that we might use from any query … Continue reading

Posted in Editorial | Tagged , | Comments Off on Why Use the Principle of Least Privilege?

SQL Injection Everywhere

I was doing the laundry the other day and thinking about SQL Injection. I have this fancy front load model that lets me load fabric softener and bleach into containers for release later, and it occurred to me that if … Continue reading

Posted in Editorial | Tagged , | Comments Off on SQL Injection Everywhere

T-SQL Tuesday Reminder – Coming next week

Matt Velic is hosting T-SQL Tuesday this month. You have a week to get a post ready on the apply operator. To help you out, here’s the BOL page on Using the Apply operator. It’s an operator that essentially lets … Continue reading

Posted in Blog | Tagged , | Comments Off on T-SQL Tuesday Reminder – Coming next week

The Standard Edition Wish List

I wrote recently about what might differentiate Enterprise Edition from Standard Edition, and there were some great responses from people. I don’t know if Microsoft will change the way they manage editions, but I know they are aware of the … Continue reading

Posted in Editorial | Tagged | Comments Off on The Standard Edition Wish List