SQL Injection

Speaker:

Kevin Boles

Abstract:

Well, we have all heard about the horror stories of data loss due to SQL Injection and how costly (in many ways) they can be. This in-depth discussion covers various forms of SQL Injection attacks and offers some guidelines on how to avoid them. Lots of code examples in both .NET and TSQL. Watch me hack a website and retrieve user data in just 3 hits on an unprotected html page!

Bio:

Kevin is a SQL Server expert, working exclusively with the product since version 6.5. With almost 20 years of database experience, he holds many SQL Server related certifications and is also an MCT and was a SQL Server MVP from 2007 to 2012. Kevin teaches occasionally and has been a very successful independent consultant for almost 15 years. His passion is the relational engine, especially scalability, performance analysis and tuning.

Recorded At:

SQL Saturday 125 Oklahoma City, Oklahoma