I've been searching all over the web for an answer. I found the paragraph
below. The article says this applies to sql 7.0. Does this apply to sql
2000 and how do I get around it?
Because of the limited access to xp_cmdshell (only members of the sysadmin
role have access to xp_cmdshell using the SQL Server service account, all
non-sysadmins use the local account SQLAgentCmdExec which has no access to
domain resources), the average end user cannot export data to a UNC path.No it works differently in SQL 2000. In 2000, you can create
a SQL Agent proxy account which will be used by SQL Server
Agent to execute jobs owned by non system administrators.
This can be a domain account. You can find more information
in the books online help topic for the extended stored
procedure that is used to retrieve or set the proxy account:
xp_sqlagent_proxy_account
-Sue
On Fri, 14 Jan 2005 12:17:04 -0800, "John"
<John@.discussions.microsoft.com> wrote:
>I've been searching all over the web for an answer. I found the paragraph
>below. The article says this applies to sql 7.0. Does this apply to sql
>2000 and how do I get around it?
>Because of the limited access to xp_cmdshell (only members of the sysadmin
>role have access to xp_cmdshell using the SQL Server service account, all
>non-sysadmins use the local account SQLAgentCmdExec which has no access to
>domain resources), the average end user cannot export data to a UNC path.
Showing posts with label web. Show all posts
Showing posts with label web. Show all posts
Friday, March 30, 2012
Wednesday, March 21, 2012
Is this a security risk?
I'm doing some testing on a vendor’s web site and ran into the error below
. I
told the vendor that displaying this kind of error could give a hacker the
information needed to hack the db or attempt SQL injection attacks etc. (btw
this is a bank). The vendor is telling me that there is no danger in
releasing this information on the web site. I thold them they need to displa
y
something else.
Assuming you or a hacker had this information, company information and the
URL where this error occurred; do you think these pose a security risk?
*** This is the error with the table database and field names changed ****
Insert statement conflicted with COLUMN CHECK constraint
'AColumnCheckConstraint'.
The conflict occurred in database 'ADatabaseName', table 'ATableName',
column 'PaymentAmount'..,
PaymentXML: 10056AWEBWEB01-4858538-14 ... WEBSERVERNAME ...Hi
It is a problem. If I was a hacker, I now have a good load of information to
start hacking with. Based on those names, I can deduce other names.
The toughest part of hacking is getting enough information so that you can
find a hole.This is a Silver platter.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Shark Bait" <SharkBait@.discussions.microsoft.com> wrote in message
news:15B676C1-BAF5-4566-BB1E-31A52B314810@.microsoft.com...
> I'm doing some testing on a vendor's web site and ran into the error
> below. I
> told the vendor that displaying this kind of error could give a hacker the
> information needed to hack the db or attempt SQL injection attacks etc.
> (btw
> this is a bank). The vendor is telling me that there is no danger in
> releasing this information on the web site. I thold them they need to
> display
> something else.
> Assuming you or a hacker had this information, company information and the
> URL where this error occurred; do you think these pose a security risk?
> *** This is the error with the table database and field names changed ****
> Insert statement conflicted with COLUMN CHECK constraint
> 'AColumnCheckConstraint'.
> The conflict occurred in database 'ADatabaseName', table 'ATableName',
> column 'PaymentAmount'..,
> PaymentXML: 10056AWEBWEB01-4858538-14 ... WEBSERVERNAME ...
>|||of Course that is a problem.
PURE Negligence.
Greg Jackson
PDX, Oregon
. I
told the vendor that displaying this kind of error could give a hacker the
information needed to hack the db or attempt SQL injection attacks etc. (btw
this is a bank). The vendor is telling me that there is no danger in
releasing this information on the web site. I thold them they need to displa
y
something else.
Assuming you or a hacker had this information, company information and the
URL where this error occurred; do you think these pose a security risk?
*** This is the error with the table database and field names changed ****
Insert statement conflicted with COLUMN CHECK constraint
'AColumnCheckConstraint'.
The conflict occurred in database 'ADatabaseName', table 'ATableName',
column 'PaymentAmount'..,
PaymentXML: 10056AWEBWEB01-4858538-14 ... WEBSERVERNAME ...Hi
It is a problem. If I was a hacker, I now have a good load of information to
start hacking with. Based on those names, I can deduce other names.
The toughest part of hacking is getting enough information so that you can
find a hole.This is a Silver platter.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Shark Bait" <SharkBait@.discussions.microsoft.com> wrote in message
news:15B676C1-BAF5-4566-BB1E-31A52B314810@.microsoft.com...
> I'm doing some testing on a vendor's web site and ran into the error
> below. I
> told the vendor that displaying this kind of error could give a hacker the
> information needed to hack the db or attempt SQL injection attacks etc.
> (btw
> this is a bank). The vendor is telling me that there is no danger in
> releasing this information on the web site. I thold them they need to
> display
> something else.
> Assuming you or a hacker had this information, company information and the
> URL where this error occurred; do you think these pose a security risk?
> *** This is the error with the table database and field names changed ****
> Insert statement conflicted with COLUMN CHECK constraint
> 'AColumnCheckConstraint'.
> The conflict occurred in database 'ADatabaseName', table 'ATableName',
> column 'PaymentAmount'..,
> PaymentXML: 10056AWEBWEB01-4858538-14 ... WEBSERVERNAME ...
>|||of Course that is a problem.
PURE Negligence.
Greg Jackson
PDX, Oregon
Friday, February 24, 2012
Is there any new feature on SQL Server 2005 for paging result?
We are web developer. The paging features of SQL Server providing will
great to improve the development time. Is there any new features on SQL
Server 2005 for paging?Yes, ROW_NUMBER() should help.
http://www.windowsitpro.com/SQLServ...3922/43922.html
You should compare these methods to those described in
http://www.aspfaq.com/2120 ... I still have some testing to do for an
article re-write, but my initial testing in an isolated environment showed
ROWCOUNT was still the winner...
A
"ABC" <abc.abc.com> wrote in message
news:OLAmPTd2FHA.3876@.TK2MSFTNGP09.phx.gbl...
> We are web developer. The paging features of SQL Server providing will
> great to improve the development time. Is there any new features on SQL
> Server 2005 for paging?
>
great to improve the development time. Is there any new features on SQL
Server 2005 for paging?Yes, ROW_NUMBER() should help.
http://www.windowsitpro.com/SQLServ...3922/43922.html
You should compare these methods to those described in
http://www.aspfaq.com/2120 ... I still have some testing to do for an
article re-write, but my initial testing in an isolated environment showed
ROWCOUNT was still the winner...
A
"ABC" <abc.abc.com> wrote in message
news:OLAmPTd2FHA.3876@.TK2MSFTNGP09.phx.gbl...
> We are web developer. The paging features of SQL Server providing will
> great to improve the development time. Is there any new features on SQL
> Server 2005 for paging?
>
Monday, February 20, 2012
Is there an option of adding style sheet for the report
Can I set the default style of my report like we do thecss in web development
I don't want to edit the style of the report manager .What I want is to edit
the report style. [mean the rendering style of the actual report]
Suppose I have to set borderwidth of table =.25pt
bordercolor of table,all of it's cell to silver.
Borderstyle to be windowsinset.
Backgroundcolor of the full layout to be black
How Can I do that ?All these settings can be done using the properties of table, page etc.. from
your VS itself.
Amarnath, MCTS
"Kamii47" wrote:
> Can I set the default style of my report like we do thecss in web development
> I don't want to edit the style of the report manager .What I want is to edit
> the report style. [mean the rendering style of the actual report]
> Suppose I have to set borderwidth of table =.25pt
> bordercolor of table,all of it's cell to silver.
> Borderstyle to be windowsinset.
> Backgroundcolor of the full layout to be black
> How Can I do that ?|||Thanks Amar
What I want's is to set some of my default style which will remain same in
all the report of my project {like we do css in our web project}
"Amarnath" wrote:
> All these settings can be done using the properties of table, page etc.. from
> your VS itself.
> Amarnath, MCTS
>
> "Kamii47" wrote:
> > Can I set the default style of my report like we do thecss in web development
> > I don't want to edit the style of the report manager .What I want is to edit
> > the report style. [mean the rendering style of the actual report]
> >
> > Suppose I have to set borderwidth of table =.25pt
> >
> > bordercolor of table,all of it's cell to silver.
> >
> > Borderstyle to be windowsinset.
> >
> > Backgroundcolor of the full layout to be black
> >
> > How Can I do that ?|||In SSRS what your need to do is create a standard report template and save it
on the template folder, so whenever you go for creating a new report you can
select this to make it standard. This is the way you can achieve your
standardization.
Amarnath, MCTS
"Kamii47" wrote:
> Thanks Amar
> What I want's is to set some of my default style which will remain same in
> all the report of my project {like we do css in our web project}
> "Amarnath" wrote:
> > All these settings can be done using the properties of table, page etc.. from
> > your VS itself.
> >
> > Amarnath, MCTS
> >
> >
> > "Kamii47" wrote:
> >
> > > Can I set the default style of my report like we do thecss in web development
> > > I don't want to edit the style of the report manager .What I want is to edit
> > > the report style. [mean the rendering style of the actual report]
> > >
> > > Suppose I have to set borderwidth of table =.25pt
> > >
> > > bordercolor of table,all of it's cell to silver.
> > >
> > > Borderstyle to be windowsinset.
> > >
> > > Backgroundcolor of the full layout to be black
> > >
> > > How Can I do that ?|||There was no native support for CSS in standard RS 2000.
But according to this blog post, there's a hotfix available to make use of
style sheets:
http://blogs.msdn.com/ketaanhs/archive/2005/09/05/461050.aspx
-Not sure if this also applies to RS 2005, but you can probably check if the
syntax that the post author describes can be used in RS 2005.
I haven't tried this method, I've just created a template and worked
manually from there. Hopefully it will help you, though. :)
Kaisa M. Lindahl Lervik
"Kamii47" <Kamii47@.discussions.microsoft.com> wrote in message
news:B87D1605-7DFB-45D0-ADB1-BE74194D9D22@.microsoft.com...
> Can I set the default style of my report like we do thecss in web
> development
> I don't want to edit the style of the report manager .What I want is to
> edit
> the report style. [mean the rendering style of the actual report]
> Suppose I have to set borderwidth of table =.25pt
> bordercolor of table,all of it's cell to silver.
> Borderstyle to be windowsinset.
> Backgroundcolor of the full layout to be black
> How Can I do that ?
I don't want to edit the style of the report manager .What I want is to edit
the report style. [mean the rendering style of the actual report]
Suppose I have to set borderwidth of table =.25pt
bordercolor of table,all of it's cell to silver.
Borderstyle to be windowsinset.
Backgroundcolor of the full layout to be black
How Can I do that ?All these settings can be done using the properties of table, page etc.. from
your VS itself.
Amarnath, MCTS
"Kamii47" wrote:
> Can I set the default style of my report like we do thecss in web development
> I don't want to edit the style of the report manager .What I want is to edit
> the report style. [mean the rendering style of the actual report]
> Suppose I have to set borderwidth of table =.25pt
> bordercolor of table,all of it's cell to silver.
> Borderstyle to be windowsinset.
> Backgroundcolor of the full layout to be black
> How Can I do that ?|||Thanks Amar
What I want's is to set some of my default style which will remain same in
all the report of my project {like we do css in our web project}
"Amarnath" wrote:
> All these settings can be done using the properties of table, page etc.. from
> your VS itself.
> Amarnath, MCTS
>
> "Kamii47" wrote:
> > Can I set the default style of my report like we do thecss in web development
> > I don't want to edit the style of the report manager .What I want is to edit
> > the report style. [mean the rendering style of the actual report]
> >
> > Suppose I have to set borderwidth of table =.25pt
> >
> > bordercolor of table,all of it's cell to silver.
> >
> > Borderstyle to be windowsinset.
> >
> > Backgroundcolor of the full layout to be black
> >
> > How Can I do that ?|||In SSRS what your need to do is create a standard report template and save it
on the template folder, so whenever you go for creating a new report you can
select this to make it standard. This is the way you can achieve your
standardization.
Amarnath, MCTS
"Kamii47" wrote:
> Thanks Amar
> What I want's is to set some of my default style which will remain same in
> all the report of my project {like we do css in our web project}
> "Amarnath" wrote:
> > All these settings can be done using the properties of table, page etc.. from
> > your VS itself.
> >
> > Amarnath, MCTS
> >
> >
> > "Kamii47" wrote:
> >
> > > Can I set the default style of my report like we do thecss in web development
> > > I don't want to edit the style of the report manager .What I want is to edit
> > > the report style. [mean the rendering style of the actual report]
> > >
> > > Suppose I have to set borderwidth of table =.25pt
> > >
> > > bordercolor of table,all of it's cell to silver.
> > >
> > > Borderstyle to be windowsinset.
> > >
> > > Backgroundcolor of the full layout to be black
> > >
> > > How Can I do that ?|||There was no native support for CSS in standard RS 2000.
But according to this blog post, there's a hotfix available to make use of
style sheets:
http://blogs.msdn.com/ketaanhs/archive/2005/09/05/461050.aspx
-Not sure if this also applies to RS 2005, but you can probably check if the
syntax that the post author describes can be used in RS 2005.
I haven't tried this method, I've just created a template and worked
manually from there. Hopefully it will help you, though. :)
Kaisa M. Lindahl Lervik
"Kamii47" <Kamii47@.discussions.microsoft.com> wrote in message
news:B87D1605-7DFB-45D0-ADB1-BE74194D9D22@.microsoft.com...
> Can I set the default style of my report like we do thecss in web
> development
> I don't want to edit the style of the report manager .What I want is to
> edit
> the report style. [mean the rendering style of the actual report]
> Suppose I have to set borderwidth of table =.25pt
> bordercolor of table,all of it's cell to silver.
> Borderstyle to be windowsinset.
> Backgroundcolor of the full layout to be black
> How Can I do that ?
Subscribe to:
Posts (Atom)