Contents
What are SQL injections How do you prevent them and what are the best practices?
Do not rely on client-side input validation.
Can a CMS be used to access another server?
Anyone allowed to connect to the CMS could use that connection to access a server with another set of credentials. This would make it impossible to have user and group based access controls to your data. You would also not be able to audit or track access to your server and identify an offending user.
Can a CMS be hosted on a SQL Server instance?
The SQL instance you choose to house your CMS must be running SQL 2008 or later. It is supported on all editions of SQL Server including the free Express Edition. Hosting a CMS on Express Edition can yield some significant cost savings in smaller shops, since it is suggested to not house your CMS on a production SQL instance.
Where is SQL server connection information stored in CMS?
The CMS allows you to store all of your SQL Server connection information in one central place on a single server. All of the connection information is stored in the MSDB database ofthe CMS server, so make sure you are backing it up regularly. The SQL instance you choose to house your CMS must be running SQL 2008 or later.
Are there any security risks with SQL Server 2005?
Secondly, organizations face security risks if they continue running SQL 2005. “Running an unsupported database means customers aren’t getting updates and patches that will protect them against new threats, and they may have trouble meeting corporate or regulatory security requirements,” Wissner says.