Dynamic SQL: Applications, Performance, and Security in Microsoft SQL Server

© Edward Pollack 2019

Edward PollackDynamic SQLhttps://doi.org/10.1007/978-1-4842-4318-3_4

4. Permissions and Security

Edward Pollack¹ 

(1)

Albany, NY, USA

 

In Chapter 2, we did a thorough look into SQL injection and the multitude of ways in which poorly written TSQL can become a target for malicious attacks. Now, we are going to step back and review best practices for SQL Server security, with a focus on dynamic SQL and its typical use cases. Security is an immense topic; one that could easily consume thousands of pages given the opportunity. It also evolves with each day that passes, as new products are released and vulnerabilities are found in older ones. Our goal is to cover the most important and common places where we need to take care while ...