May 2008 - Posts

• More on the recent rash of SQL injection attacks (update 6/3)

  Fellow MVP Steve Kass and Microsoft's Buck Woody have some links and advice about preventing SQL injection attacks not only from affecting your data but also from affecting your users. You can see the information here: http://stevekass.com/blog/2008/05/31/read-this-if-you-serve-up-web-pages-from-sql-data/ Read More... Posted Saturday, May 31, 2008 12:42 AM by AaronBertrand | 4 Comments Filed under: sql injection

• Are you (or is your team) nervous about SQL Server 2008?

  As you may know, I have been heavily involved in testing a lot of the new features in SQL Server 2008, and am likely as excited as anybody about its release. Since I work at a fairly progressive company, I spoke with two of my superiors today - independently Read More... Posted Tuesday, May 20, 2008 6:21 PM by AaronBertrand | 9 Comments Filed under: SQL Server 2008

• Do you want IntelliSense to support SQL Server 2005?

  Currently, the plans for IntelliSense are to support SQL Server 2008 *ONLY*... since it works against SQL Server 2005 in the February CTP, I was very surprised to learn that it is being dropped by RTM (and possibly by RC0). This is mainly because of the Read More... Posted Monday, May 19, 2008 7:59 PM by AaronBertrand | 15 Comments Filed under: SQL Server 2008, backward compatibility, intellisense

• When was my database / table last accessed?

  A frequently asked question that surfaced again today is, "how do I see when my data has been accessed last?" SQL Server does not track this information for you. SELECT triggers still do not exist. Third party tools are expensive and can incur unexpected Read More... Posted Tuesday, May 06, 2008 2:14 AM by AaronBertrand | 8 Comments Filed under: SQL Server 2008, DMVs, dynamic management views, SQL Server 2005, auditing