Recover from a SQL Injection Attack on SQL Server

Lately it seems like SQL Injection attacks have been increasing. Recently our team has worked through resolving a few different SQL Injection attacks across a variety of web sites. Each of these attacks had a number of similarities which proved to point back to the same source. With this information in hand, the resolution should be much quicker. As such, if your web site is attacked with SQL Injection, how should you address it? How can the identification, analysis, recovery and resolution be streamlined? What are some lessons learned?

Hashing

Building a Security Philosophy

SQL Server trainer and expert DBA, Andy Warren, thinks that everyone should have a philosophy about security. He starts this installment in looking about how to assign administrative privileges.

Remove SQL Logins from All Databases and SQL Server

Locate and remove/delete user logins from all databases and even SQL server.

Alerts for when Login Failures Strike

When repeated SQL Server login failures occur, a DBA should investigate. It could just be someone repeatedly typing in the wrong password. Worst case is a virus attack flooding your network with connection requests. Receiving an e-mail while login failures are occurring allows DBAs to investigate and fix the issue as soon as possible. So how is DBA notified of login failures without flooding their inbox?

List all Usernames, Roles for all the databases.

Generates a list of ALL Users and their database Roles for all Databases (Or for a specific user).

Discuss content posted by Martin Cremer

Discussions about content posted by Martin Cremer

Create Role for specific set of Objects based on a set of Conditions.

This script is for the Generating a code block that makes it easier to grant various permissions on a group of objects qualified by specific Criteria.

References Permission

To Check for Orphaned Users in a Database

This script is helpful to identify the orphaned users in a database, useful when we restore a database from a different location.