Find and Replace Injection String in Server 2005

Question

Find and Replace Injection String in Server 2005

Viewing 11 posts - 16 through 25 (of 25 total)

You must be logged in to reply to this topic. Login to reply

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 1

I know what it is and I also know if you take the time to do things correctly that tools like IronSpeed are just as good for development as the more basic tools like C# and its kind are. That means it still comes down to the person using the tool.

And no, I don't blame the OS if I get hacked because of flaws in the code, I blame the developers that wrote the code in the first place.

Jeff Moden SSC Guru Points: 1004363 More actions · Answer 2

Lynn Pettis (4/7/2014)
I know what it is and I also know if you take the time to do things correctly that tools like IronSpeed are just as good for development as the more basic tools like C# and its kind are. That means it still comes down to the person using the tool.
And no, I don't blame the OS if I get hacked because of flaws in the code, I blame the developers that wrote the code in the first place.

No sense in arguing about this now. The person using it is long gone. The OP is trying to clean the mess up. 🙂

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 3

Jeff Moden (4/7/2014)
Lynn Pettis (4/7/2014)
I know what it is and I also know if you take the time to do things correctly that tools like IronSpeed are just as good for development as the more basic tools like C# and its kind are. That means it still comes down to the person using the tool.
And no, I don't blame the OS if I get hacked because of flaws in the code, I blame the developers that wrote the code in the first place.
No sense in arguing about this now. The person using it is long gone. The OP is trying to clean the mess up. 🙂

I just have a problem with people that blame the tool, not the person who used the tool incorrectly.

As for cleaning up the database, I would restore the database to another name up to the PIT just before the attack and fix the data from the restored database.

Jeff Moden SSC Guru Points: 1004363 More actions · Answer 4

Heh... I tend to blame both. Cruddy tools being used by people that just don't know. It's a deadly combination.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

allaspects SSC Enthusiast Points: 164 More actions · Answer 5

Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.

That's why the world can't have nice things.

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 6

allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.

You might want to google Lynn's contributions here before you say that....

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 7

Jeff Moden (4/9/2014)
Heh... I tend to blame both. Cruddy tools being used by people that just don't know. It's a deadly combination.

Frighteningly true, especially since the people who don't know can't tell that the tool is cruddy.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Luis Cazares SSC Guru Points: 183706 More actions · Answer 8

allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.
That's why the world can't have nice things.

That's a strong accusation based on a single thread. Lynn has been a great contributor, he just happens to have strong convictions.

Luis C.
General Disclaimer:
Are you seriously taking the advice and code from someone from the internet without testing it? Do you at least understand it? Or can it easily kill your server?

How to post data/code on a forum to get the best help: Option 1 / Option 2

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 9

GilaMonster (4/9/2014)
allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.
You might want to google Lynn's contributions here before you say that....

Luis Cazares (4/9/2014)
allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.
That's why the world can't have nice things.
That's a strong accusation based on a single thread. Lynn has been a great contributor, he just happens to have strong convictions.

:blush:

I am humbled by your support.

:blush:

Jeff Moden SSC Guru Points: 1004363 More actions · Answer 10

allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.
That's why the world can't have nice things.

From where you sit and since this might be your first exposure to Lynn, I can understand why you might think that but, I've known him for a very long time and I can tell you, he's definitely not a troll. He happens to be voicing an opinion that I share and, although I'm short, fat, ugly, and have a bit of an odd gait, I'm not a troll either. 😛 Lynn is a valued member of this and other forums and has helped untold numbers of people find a better way in SQL Server in a concerned and proper mentor-like fashion.

All of us take a stand on something now and then. This happens to be one place where Lynn is taking a stand. 😀 You should see me when someone insists that RBAR is good enough based on a small number of rows. :hehe:

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 11

Jeff Moden (4/9/2014)
allaspects (4/9/2014)
Lynn is obviously trolling. Sad that on a resource such as this website, someone is out to troll and not help.
That's why the world can't have nice things.
From where you sit and since this might be your first exposure to Lynn, I can understand why you might think that but, I've known him for a very long time and I can tell you, he's definitely not a troll. He happens to be voicing an opinion that I share and, although I'm short, fat, ugly, and have a bit of an odd gait, I'm not a troll either. 😛 Lynn is a valued member of this and other forums and has helped untold numbers of people find a better way in SQL Server in a concerned and proper mentor-like fashion.
All of us take a stand on something now and then. This happens to be one place where Lynn is taking a stand. 😀 You should see me when someone insists that RBAR is good enough based on a small number of rows. :hehe:

:blush:

Thank you, Jeff. I am humbled.

And yes, I have seen your responses to people supporting RBAR code. :hehe: