Tag Info

Hot answers tagged

4

Short answer: The password check via the if statement is not sufficient. With the SQL injection and access to the source of your authentication script, they have everything they need for full access. Long answer: We've already established that your auth script is vulnerable to SQL injection. You also describe the code as very old and unchanged. From this ...


2

BitLocker can be enabled at the host level. The host can start without intervention provided that the server has a TPM chip (any decent server hardware in the last five years has a TPM chip). Microsoft added BitLocker support for CSV volumes in Windows Server 2012. BitLocker in a guest is currently not supported by Microsoft. It is possible, but to ...


2

The Microsoft link given above does not address the "Local server connection" server names in maintenance plans. These queries let you check the maintenance plan connection strings. All use the msdb database. (SQL 2008, also SQL 2005 if sysssispackages is changed to sysdtspackages90) SELECT x.*, LocalServerConnectionString = cm.n.value('declare ...


2

Single quotes will do it; escaping the space then is optional: \i '/home/markus/Documents/Projekte/My\ App/Installation/server_sql_script.sql'


1

I would seriously consider a dedicated VPN connection (either hardware or software) for this - a permanent SSH tunnel is extremely hacky and prone to failure/problems as you have found out. However, if you really want to persue an SSH tunnel, you can use autossh to initiate the connection from a Linux server. I'm unsure if there are Windows builds available ...


1

there are two thinks to configure for opening SqlServer to the wild: In configuration manager: And in SSMS: Sorry my server is in french...


1

The export part has been answered over at DBA: http://dba.stackexchange.com/questions/25755/taking-a-backup-of-a-single-table-in-the-sql-server How to export one single table on SQL server has been answered numerous times on Stackoverflow too: http://stackoverflow.com/questions/680552/table-level-backup ...


1

You can also fetch the data direct per SQL on your target Server. If you have network access: SELECT a.* INTO <YOUR TARGET TABLE> FROM OPENROWSET('SQLNCLI', 'Server=<IP/SERVERNAME>;Trusted_Connection=yes;', 'SELECT * FROM <YOUR TABLE> ') AS a; But you must create the indexes by your self. Or you using INSERT: INSERT ...


1

Resolving conflicts info won't appear on the portal. The "Sync completed successfully" indicates data synced and conflicts resolved if exist. If there are too much conflict rows, you will receive a warning message to tell you sync partially succeeded.


1

You have to start with the application. Azure SQL works with white list by default so it's unlikely someone accessed your database directly. Most probable scenario would be bots (malicious or not) that found your web server and started to crawl. They usually works for a small amount of time and leave. Check web server access logs (filter date/time ...



Only top voted, non community-wiki answers of a minimum length are eligible