SQL Injection : Definition and Prevention

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance [...]

Storing and Retrieving Images from SQL Database.

To store an image in to sql server using C#, you need to read image file into a byte array. Once you have image data in byte array, you can easity store this image data in sql server using sql parameters. Following code explains you how to do this.
private void cmdSave_Click(object sender, EventArgs e)
{
try
{
//Read Image [...]

Microsoft Warns Vulnerability In SQL Server

icrosoft issued an advisory late on Monday confirming a remote code-execution vulnerability affecting its SQL Server line.
The vulnerability affects Microsoft SQL Server 2000, Microsoft SQL Server 2005, Microsoft SQL Server 2005 Express Edition, Microsoft SQL Server 2000 Desktop Engine (MSDE 2000), Microsoft SQL Server 2000 Desktop Engine (WMSDE) and Windows Internal Database (WYukon). Microsoft said [...]

Tips to Increase the Performance of Your SQL Database

Following are tips which will increase your SQL performance :-
1. Every index increases the time takes to perform INSERTS, UPDATES and DELETES, so the number of indexes should not be too much. Try to use maximum 4-5 indexes on one table, not more. If you have read-only table,then the number of indexes may be increased.
2. [...]

What is SQL Injection?

It is a Form of attack on a database-driven Web site in which the attacker executes unauthorized SQL commands by taking advantage of insecure code on a system connected to the Internet, bypassing the firewall. SQL injection attacks are used to steal information from a database from which the data would normally not be available [...]

Using Fill Factor in SQL Server

The ‘fill factor’ option specifies how full SQL server will make each index page. When there is no free space to insert new row on the index page, SQL Server will create new index page and transfer some rows from the previous page to the new one. This operation is called page splits. You can [...]

Transaction Levels in SQL Server

Transaction Isolation level decides how is one process isolated from other process.Using transaction levels you can implement locking in SQL SERVER. There are four transaction levels in SQL SERVER :-
1. READ COMMITTED
The shared lock is held for the duration of the transaction, meaning that no other transactions can change the data at the same time. [...]

Types of Locks Available in SQL Server

Depending on the transaction level six types of lock can be acquired on data :-
1. Intent Locks
The intent lock shows the future intention of SQL Server’s lock manager to acquire locks on a specific unit of data for a particular transaction. SQL Server uses intent locks to queue exclusive locks, thereby ensuring that these locks [...]

Replication in SQl Server

Replication is way of keeping data synchronized in multiple databases. SQL server Replication has two important aspects publisher and subscriber.
Publisher
Database server that makes data available for replication is called as publisher.
Subscriber
Database Servers that get data from the publishers is called as Subscribers.
There are three types of replication supported by SQL SERVER:-
Snapshot Replication.
Snapshot Replication takes snapshot [...]

Integrating SQL database within the .NET project

Many of you have had develope applications that use the database for a proper functioning, the main problem comes when you consider to eploy you application at any other machine. The Database is not available at the machine, so your application gives error. To remove this error, there are two ways you create the database [...]