Browse by Tags

• Dynamic SQL
• General Security
• sql injection

Dynamic SQL and digital signatures in SQL Server 2005

As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server 2005 we introduced a new feature that is also quite powerful and when used properly can be quite useful; but it is important to learn and understand any such Read More...

Posted 09 May 07 11:42 by raulga | 5 Comments   
Filed under SQL Server Execution Context, SQL Server Signatures, General Security, Dynamic SQL, sql injection

Using a digital signature as a secondary identity to replace Cross database ownership chaining

In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access (DML access) to resources on different DBs without explicitly granting access to the resources (such as tables) directly. Unfortunately CDOC is a feature Read More...

Posted 30 October 06 07:53 by raulga | 3 Comments   
Filed under SQL Server Execution Context, SQL Server Signatures

Search

This Blog

• Home

Tags

• Dynamic SQL
• General Security
• sql injection
• SQL Server Encryption
• SQL Server Execution Context
• SQL Server Signatures

Archives

• November 2007 (1)
• July 2007 (2)
• May 2007 (2)
• January 2007 (2)
• October 2006 (1)
• July 2006 (1)
• May 2006 (1)
• March 2006 (1)

Syndication

• RSS 2.0
• Atom 1.0