Post reply

which is more secure for file deletion, sp_OACreate or xp_cmdshell

  • July 1, 2008 at 3:59 am

    #193940

    which do i enable that is the most secure for file deletion, sp_OACreate or xp_cmdshell? Both are disabled by default.

  • July 1, 2008 at 5:54 am

    #836583

    Both are relatively insecure. I would recommend a CLR stored procedure - it is not much more secure, but it is using the newer technology.

  • July 1, 2008 at 11:50 am

    #836850

    I'd use xp_CmdShell, then make sure to call it with a specialized login that has severely limited rights.

    - Gus "GSquared", RSVP, OODA, MAP, NMVP, FAQ, SAT, SQL, DNA, RNA, UOI, IOU, AM, PM, AD, BC, BCE, USA, UN, CF, ROFL, LOL, ETC
    Property of The Thread

    "Nobody knows the age of the human race, but everyone agrees it's old enough to know better." - Anon

  • July 1, 2008 at 11:58 am

    #836855

    I'll ask a more general question first. What is being deleted, and what are the requirements for the solution you are working on? I ask, as another way to do this would be use SSIS and the File System Task available in SSIS.

    😎

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply