안녕 거기,

그것이 SQL 서버와 연락하고 있는 웹 신청에 올 때 모두 시키는 2개의 아주 간단한 황금률을 아십시오:

1. 결코 (후부) SQL 서버에 사용자 입력 문자열을 직접적으로 보내지 말라. 그것을" 위로 청소하는 것을 "첫째로 확인하십시오 (예를들면. 특별한 숯 없음 등등). 당신은 원한ㄴ다는 것을 당신이 알고 있는 수락 것만.

2. 항상 내장 프로시저를 이용하고 당신의 (후부) SQL 서버의 문자열 (SQL 주입) 포획 통제를 시키기 대신에 논쟁에 부르십시오.

그 규칙 대로 행하는 것은 생활을 저 같이 admins, 고문 및 안전 녀석을 위해 많게 쉽게 할 것이다. 당신에게 회사 개발자, 제3자 소프트웨어 납품업자 등등을 말하십시오. 규칙 대로 행하기 위하여는 (비록 그들이 그들을 이미 암기해야 하더라도) - 낱말을 퍼지거든 생활은 우리 모두를 위해 전세계 많게 더 쉬울 것이다 좋은 사람들:)

제목: 직업적인 SQL 서버 2005년 행정 (Wrox 직업적인 가이드)
저자: Brian 기사/Ketan Patel/Wayne Snyder/진 Claude Armand/로스 LoForte/대가리 없는 못 McGehee/Steven 풀/조 Salvatore/Haidong Ji
발행인: Wrox
ISBN: 0470055200
선술집 날짜: 2006-12-06

책 묘사
SQL 서버 2005년은 그것의 처음부터 SQL 서버를 위해 앞으로 가장 큰 뜀이다. 이 갱신으로 새로운 특징은 경험있는 SQL 서버 조차 DBAs 도전할 온다. 기업에 어떤의 제일 SQL 서버 전문가의 팀에 의해 써, 이 포괄적인 자습서는 당신에게 SQL 서버 관리의 광막하게 바뀐 조경을 항해하는 방법을 보여준다.

당신에게 최상의 방법, 유일한 끝 및 간계 및 유용한 workarounds를 제안하는 원래 경험을 독자적으로 당겨서, 저자 도움 당신 막고 잠그기를 포함하여 가장 곤란한 SQL 서버 2005년 행정 문제점 조차, 취급한다. You†™ll는 SQL 서버 2005년을 형성하고 관리하는€ 당신이 빨리 정상에게 방법의 학습 곡선을 얻을 수 있다 그래야 이미 써진 질문 youâ ™ve를 미조정하는 방법을 배우고, 과다한 감시 및 유지 보수 업무를 자동화하고, 숨겨지은 공구를 사용한다.

당신이 이 책에서 배울 무엇을

어떤을의 더 진보된 개념 사용하는 방법…

Title: Professional SQL Server 2005 CLR Programming: with Stored Procedures, Functions, Triggers, Aggregates and Types
Author: Derek Comingore / Douglas Hinson
Publisher: Wrox
ISBN: 0470054034
Pub-Date: 2006-12-11

Book Description
SQL Server 2005 offers the capability to write code in a .NET language that can be compiled and run inside SQL Server. CLR Integration, or SQL CLR, lets you create stored procedures, user-defined types, triggers, table valued functions, and aggregates using a .NET managed language. You can read and write to resources outside of SQL Server and enjoy a tighter integration with XML, web services, and simple file and logging capabilities.

Here’s the reference you’ll want on your desk as you develop SQL CLR solutions. It helps you decide whether to use SQL CLR, how to lock down security, and learn from real examples. If you want to develop stored procedures or other objects in .NET for SQL Server 2005, this book offers exactly what you need.

What you will learn from this book

The concepts and architecture of SQL CLR
Uses of .NET namespaces in SQL Server programming tasks
How to develop and benchmark routines in T-SQL and .NET to determine when CLR-based solutions are advantageous

Title: Expert SQL Server 2005 Integration Services (Programmer to Programmer)
Author: Brian Knight / Erik Veerman
Publisher: Wrox
ISBN: 0470134119
Pub-Date: 2007-05-29

Book Description
As a practical guide for Integration Services ETL development, this book shows you ways to implement your ETL solution requirements from the data to the administration and everything in-between. Each chapter begins with a review of pertinent ETL concepts and moves into working those out into a design with multiple examples and related Integration Services features with the end goal of putting it all together to get a solution.

http://www.amazon.com/exec/obidos/redirect?path=ASIN%2F0470134119
Download

TITLE : MCITP Developer: Microsoft SQL Server 2005 Data Access Design and Optimization Study Guide: Exam 70-442 (Paperback)
AUTHOR : by Marilyn Miller-White (Author), Cristian Andrei Lefter (Author)
PUBLISHER : Sybex publisher
ISBN : 0470108800
EDITION : 1st
PUB DATE : April 02, 2007
LANGUAGE : English

Get the preparation you need for exam 70-442, PRO: Designing and
Optimizing Data Access by Using Microsoft SQL Server 2005, one of two
required exams in the Microsoft MCITP: Database Developer certification
path. Your essential guide to Microsoft’s new SQL Server 2005
certification features practical and in-depth coverage, including:

- Full coverage of all exam objectives in a systematic approach, so
you can be confident you’re getting the instruction you need for the
exam.
- Practical hands-on exercises that reinforce critical skills.
- Real-world scenarios that put what you’ve learned in the context of
actual job roles.
- Challenging review questions in each chapter to prepare you for exam
day.
- Exam Essentials, a key feature at the end of each chapter that
identifies critical areas you must become proficient in before taking
exam 70-442.
- A handy tear card that maps every official exam objective to the
corresponding chapter in…

TITLE : SQL Server 2005 Bible
AUTHOR: Paul Nielsen
PUBLISHER: Wiley
ISBN: 0764542567
PUB DATE : 2006-11-06
LANGUAGE : English

Use this comprehensive tutorial and reference to increase productivity and write stored procedures using the language with which you’re most familiar. The revised content covers new features such as XML integration, Web services, the .NET Common Language Runtime (CLR), and security updates, making this book a must for any developer or database administrator transitioning to the new version of SQL Server. You’ll learn to develop SQL Server database and data connections, administer SQL Server, and keep databases performing at their peak. In addition, you’ll find dozens of specific examples in both a graphical format and as SQL code as well as numerous best practices describing the most effective way to accomplish a given task. A companion Web site provides all of the code examples found in the book.

URL: http://www.amazon.com/exec/obidos/tg/detail/-/0764542567/
Download