Brian,
Wouldn't it be possible for the web application to capture the user details to pass in and SQL statement?
Eg
On SQL the only windows user with access is our DBA, lets call him Bob. Bob has created an SQL user called WEBUSER that has all the required permissions to the SQL database and...
Brian,
I prefer SQL ony authentication for web applications as I do not like the thought of a web site user having windows access to the domain. At least this way there is no domain user available on the web site and it makes hacking a little bit more difficult.
The SQL only user for the web...
Hi,
One thing to do is check the server security settings. Does the server accept windows only or windows and SQL authentication. I amm assuming that the user for the asp page is a SQL only user, not a windows user.
Mark
Another option is to always use dd mmm yyyy format for inserting your date. I find SQL resolves this correctly no matter what date settings the server has.
Hi brian,
the syslogins table will only hold valid SQL users. If you are finding users in there that you know nothing about their permissions are being set by the windows group they are attached to. If all of your users are a part of the administration windows group they will be given DBA...
I have a little UDF that I use for this. I capture customer names and as such was having the same problem with single quotes. Herr it is.
CREATE FUNCTION dbo.ufc_STR_ReplaceSingleQuote (@InputString varchar(1000))
-- Replaces any single quotes with two quotes eg O'Brien become O''Briem...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.