In addition to what Jeff said, check with your regulatory compliance or legal department(s) and ask them if the logs have to be considered "unalterable", which limits your storage options...

This explicitly facilitates SQL Injection, and second order SQL injection at that; it doesn't have to be a web page that does it.

Little Bobby Tables would also cause the students...

I believe that part of proving it with code is having valid, reliable measurements. Another part...

Jeff Moden (6/17/2015)

---

As another frequent poster on these fine forums has as a tag line in his signature... "I'm a DBA. It's not my job to solve problems. ...

I have to amend my answer!

There is, in fact, a PBKDF2 implementation on SQL Server - even PBKDF2-HMAC-SHA-512 (modifiable for SHA1 if required):

https://stackoverflow.com/questions/7837547/is-there-a-sql-implementation-of-pbkdf2

Both the SHA-512 and the SQL 2008 compliant...

What does the business care about?

Response time?

Accuracy?

Safe nimbleness/agility (i.e. changes don't break existing code, like column adds)?

First you must mean the same thing as the developers when speaking...

butcherking13 (5/19/2015)

---

Thank you and I will do just that. I was just curious about page splits since deleting and adding data will be common in this instance.

I'm curious about two...

You first.

:Whistling:

I have to wait for SP1 CU1 anyway - SP1 only goes up to 2014 RTM CU5.

I would generally recommend at least a glance at the following page:

Isolation Levels in the Database Engine

due to the very simple table, which boils down to:

Level ...

First, note that EU privacy laws are generally very different from those in other parts of the world.

I'd have to say that I'm entirely in favor; just because...

I'd ask why they want it, in terms like "What operations are you trying to do that you can't" and "Please send me a screenshot that includes the error message".

Then...

If you have high minimum performance requirements (it must always be at least this fast), then go back to your SAN admin with that and discuss dedicated storage.

If you do...

Brandie, good points on SOX (and, I suspect, PCI-DSS) password change requirements. Note that there may, or may not, be differing requirements for passwords that any human knows and...

100% agree: No user should know any other user's account. Ideally, when I have to reset or set up a user's password (certainly with developers), which is very rare...

I'd say my answers today are pretty similar to what they were in 2009 when this article was originally posted.

The main issue I see with consolidation of any type is...