Hi,

I know this post is now 5 1/2 years old but, as Jeff says, it's fun... :Whistling:

I found this post looking for an answer to the original question, and...

Jeffrey Williams-493691 (3/22/2010)

---

Instead of using db_datareader, and then trying to remove all other access - it would be better to create your own role and add the specific rights you...

Thanks!

Adam

Paul,

That...

As an aside, for paging problems, I often write the query seek down a key to find the one page of keys for display, and then 'look up' the row...

Was that really necessary?

It is quite...

Hi,

I presume this is for paged results to a web page or something similar.

You can use the ROW_NUMBER() OVER statement to add a new column with row numbers, so you...

I suggest you run it in your webpage and verify that it did not happen. It likely did occur for the hacker and the hacker will return at a...

Doh!

Missed that - Sorry!

Adam

Gail,

Thanks for the pointer. I had a look though the rest of the logs and there was no sign of further attempts, so the delay must have not happened for...

Lynn,

Thanks for that. How do you decode it though?

I can't see any other attempts though, so the attacker's 'test' of my site obviously failed (from the attackers point of view...

No problem - all suggestions welcome!

RBarryYoung (2/21/2010)

---

You might also want to check you tempdb and the Disk that it is on. One thing that might cause this is if it tried to expand tempdb,...

I think I've fixed it.

I dropped and recreated both indexes (having had to drop all connections from the database to make the drop work)

Now, select * from search_data order by...

Lynn Pettis (2/19/2010)

---

The image wouldn't help, and the xml difficult to read. Since this is SQL Server 2005, you can save the plan as a .sqlplan, zip and then...