This module provides students with an explanation of how to use Microsoft® SQL Server security features to protect Web application data. After completing this module, students will be able to connect securely to a SQL Server database, and use the SQL Server security model to protect a Web application against SQL injection attacks. | msdn training Module 7 Securing Microsoft SQL Server Contents Overview 1 Lesson SQL Server Connections and Security 2 Lesson SQL Server Role-Based Security 15 Lesson Securing SQL Server Communication 32 Lesson Preventing SQL Injection Attacks 36 Review 46 Lab 7 Securing Microsoft SQL Server Data 48 Microsoft Information in this document including URL and other Internet Web site references is subject to change without notice. Unless otherwise noted the example companies organizations products domain names e-mail addresses logos people places and events depicted herein are fictitious and no association with any real company organization product domain name e-mail address logo person place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright no part of this document may be reproduced stored in or introduced into a retrieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise or for any purpose without the express written permission of Microsoft Corporation. Microsoft may have patents patent applications trademarks copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft the furnishing of this document does not give you any license to these patents trademarks copyrights or other intellectual property. 2002 Microsoft Corporation. All rights reserved. Microsoft MS-DOS Windows Windows NT ActiveX Active Directory Authenticode Hotmail JScript Microsoft Press MSDN PowerPoint Visual Basic Visual C Visual Studio and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the United States and or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Module 7 Securing Microsoft SQL Server iii .
