1.Describe way(s) to tune the SQL table in order to
optimize performance.
2. Explain SQL Injection and how can you prevent them?
Answer / jerry joseph
1. identify and create optimal indexes for your tables
every table should have at least a clustered index
Indexes should be considered on all columns that are
frequently accessed by the WHERE, ORDER BY, GROUP BY, TOP,
and DISTINCT clauses
Static tables can be more heavily indexed that dynamic tables
2. An SQL Injection attack is a form of attack that comes
from user input that has not been checked to see that it is
valid. The objective is to fool the database system into
running malicious code that will reveal sensitive
information or otherwise compromise the server.
Example:
StrSQL = "SELECT * from Users WHERE username = '" +
txtUserName.Text + "' AND password = '" + txtPassword.Text +
"'";
if txtUserName is entered as "admin' OR 1 = 1;--" the query
becomes
"SELECT * from Users WHERE username = 'admin' OR 1 = 1;--'
AND password = '" + txtPassword.Text + "'"
user logs in as admin
Prevention :
Use Parameterized Queries or Stored Procedures to prevent
SQL Injection.
Is This Answer Correct ? | 0 Yes | 0 No |
What is dknf in normalization form?
Wht is the difference between stored procedure and trigger
Explain different types of lock modes in sql server 2000?
What is the difference between the export /import functions in sql studio and standalone sql manager? : sql server management studio
What are the types of joins in sql?
Can binary strings be used in arithmetical operations?
how to find number of columns in a table in sql server 2000 and 2005 also
How many instances per computer are there in sql server 2000?
how to delete duplicate rows from table
Explain about Joins?
Difference between connected and disconnected database in .net with sql server?
Explain what are the basic functions for master, msdb, model, tempdb databases?