August 2006 Entries
Here are some hints for securing sql server.... here's my rant for today (it's been a while) Why is it people ignore the basics? Why do they insist on ignoring the principle of least privlege? Here's a couple of simple things you can do to help secure your SQL server (when developing code) Connect to the SQL server with a non-DBO account, grant it execute rights to Stored procedures and thats it! Don't use inline SQL and don't grant it Select insert update and delete on views or tables. By doing...