Answer / jerry joseph

1. identify and create optimal indexes for your tables

every table should have at least a clustered index

Indexes should be considered on all columns that are
frequently accessed by the WHERE, ORDER BY, GROUP BY, TOP,
and DISTINCT clauses

Static tables can be more heavily indexed that dynamic tables

2. An SQL Injection attack is a form of attack that comes
from user input that has not been checked to see that it is
valid. The objective is to fool the database system into
running malicious code that will reveal sensitive
information or otherwise compromise the server.

Example:
StrSQL = "SELECT * from Users WHERE username = '" +
txtUserName.Text + "' AND password = '" + txtPassword.Text +
"'";
if txtUserName is entered as "admin' OR 1 = 1;--" the query
becomes
"SELECT * from Users WHERE username = 'admin' OR 1 = 1;--'
AND password = '" + txtPassword.Text + "'"
user logs in as admin

Prevention :
Use Parameterized Queries or Stored Procedures to prevent
SQL Injection.

Why I am getting "the microsoft .net framework 2.0 in not installed" message?

0 Answers  

---

How can you list all the table constraints in a database?

0 Answers  

---

can i write function in stored procedure and stored procedure in function and nested procedure.Give one example for each question?

1 Answers   Cap Gemini, TCS,

---

What is sql sandbox in sql server?

0 Answers  

---

What are the different type of replication in sql server?

0 Answers  

---

How many databases Microsoft SQL server provides?

0 Answers   Abacus,

---

How do you implement session management in SQL Server mode?

0 Answers   Cap Gemini,

---

What does Master database contains?

0 Answers   Abacus,

---

Can sql servers link to other servers like oracle?

0 Answers  

---

What is a collation in ms sql server?

0 Answers  

---

How to create hyperlink from returned sql query ?

0 Answers   MCN Solutions,

---

Explain filtered indexes benefits?

0 Answers  

---