Taking the black art out of SQL tuning
As any database admin knows, mastering the subtler nuances of SQL can be likened to the black arts. For me, tuning the efficiency of SQL queries on large, heavily used databases is a perfect example.
Sure, I know how to use the query analysis tools built into SQL Server and Oracle — but even with them, [...]
How to hack by SQL
This appeared to be an entirely custom application, and we had no prior knowledge of the application nor access to the source code: this was a “blind” attack. A bit of poking showed that this server ran Microsoft’s IIS 6 along with ASP.NET, and this suggested that the database was Microsoft’s SQL server: we believe [...]