Security In Hosted Database Servers
Sep 22, 2007
Hello,
I am working on an ASP.NET apllication which will work with sensitve data that needs stored as encrypted. The ASP.NET application and SQL Server 2005 will be hosted outside of our company.
My questions are:
When I create a database master key, a certificate and a symetric key to encrypt and decrypt my data, will I be able to use these (master key, cert and symetric key) in other databases (say my local development SQL Server 2005 instance)?
Is a managed hosting a better solution to have total control over the the keys in the database?
Is there a white paper or guidance document for security in hosted databases?Thanks
-Al
View 3 Replies
ADVERTISEMENT
May 2, 2008
Dear guys
I want to publish my web site and sql server on a hosted server. But i'm worried about people behind the server. all of my codes including web and stored procedures of sql server are open. as far as I know, there is no effective way to protect web pages source. how about sql server? I mean compiling stored procedures.
and another important thing is data. I think certain people have potential to see or change all of my records, or for example give email address of my customers to a third party or ... .
Is there any way?
View 4 Replies
View Related
Aug 1, 2007
Hi,
How do I insert data that I have collected in a local database onto a table on my online ie hosted database which is on a different server?
At the moment I am just uploading all the data to the hosted DB but this is wasting bandwith as only a small percentage of data is actually selected and used.
I thought that if i used a local DB and then update the table on my hosted DB this would be much more efficient, but I am not sure how to write the SQL code to do this!
Do I do some kind of
INSERT INTO sample_table
SELECT xxx
FROM origanal_table
Or is it more complicated than this?
Thanks
View 6 Replies
View Related
Mar 7, 2008
I've tried everything. The CreateUserWizard works fine, but then, I didn't have to connect anything for that. I've tried both SQLServer and MySQL. Connection Strings are correct, everything is correct as far as I can see. I've followed every step many many times. I'm about to go back to the old style and use VB6, because this is just stupid. The error I get is "An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server)" If anyone could help me out with this I'd really appreciate it.
View 6 Replies
View Related
Jun 28, 2012
I have a SQL Server 2005 database hosted by a provider that has about 500 databases on their site. I am running Access2007 on a Windows 7 Home Premium edition.
What I am trying to do is create a new Access2007 application and attach (i.e: Link) to the SQL Server tables. I am using SQL Authentication.
I have done this before where i attached via ODBC to Oracle, but it was on the corporate network - not on a hosted server. When i try to walk thru the Access process, it does not seem to let me give it the database name. I have the connection string i use in C# (for example: Data Source, Initial Catalog, UserID and Password), how to connect with Access2007.
View 4 Replies
View Related
Mar 18, 2006
Hello,
I would like to know whether is it possible to administer a database on a hosted site - i.e inserting some lines, executing a query. I normally access the files via ftp connection. And so far the only way I figured I can mess around with the database is to download it and change it on my desktop PC.
Thank You.
Tomáš Pajonk
View 5 Replies
View Related
Apr 28, 2006
What is the best way to insert records into an SQL Server 2005 database that's being hosted with my website. The data will originate from customer sites as transactions. Do I connect to the hosted database using TCP/IP or do I create web pages that accept the data variables? This is all new to me!
I need this to happen unattended and 24/7/365
Thanks
Tim
View 1 Replies
View Related
Jul 20, 2005
Hi allWe have a small database that we host on our own local server. In order toget the information into the database I have a VB program that collates theinformation from a variety of sources and then over our local internalnetwork writes it to the database tables.This information is then made available over the internet using thecompanies broadband connection. In order to alleviate bandwidth issues weare looking at paying for someone else to host the database.What I am hoping to achieve is to keep the VB software, but during the nightupload the data to the remotely hosted SQL server using say a series ofupdate statements. Does anyone know if this is possible, and will SQL Serverlook after the integratory of the data. Is there any issues with therelatively low speed of then Internet as compared with a local networkenvironment. The amount of data we are looking at moving is very little,some where in the region of a few hundred records per night split over about10 tables.many thanksAndy
View 1 Replies
View Related
Sep 11, 2007
I'm not sure this is the exact forum in which to ask this question, so if there is a more appropriate forum, please point me in that direction.
Basically I'm looking for advice and best practices for dealing with an upgrade plan for a hosted database. Here is the situation:
- Hosted software application (.Net)
- Uses SQL Server 2005
- When we upgrade the software application to a new version, there will be schema and data changes that need to be applied to the database
- For the software application, we have considered upgrading an offline machine and then switching old one instantaneously.
- For the database, I'm trying to figure out if we can keep everything live for upgrades, or if we should have a small amount of scheduled downtime to upgrade.
So we have identified 2 basic directions:
1) Keep the database live and apply the new script changes just after the application software is upgraded. This means zero downtime, but we'd have to design and test our application to be backward compatible, so that the new version of the application code could handle both the new schema design, and the old schema design. It seems that this option would add a huge amount of complexity because we would essentially be testing a 3rd app/schema combination.
2) Take a small amount of scheduled downtime and upgrade the application code and database all at once.
Obviously option #2 is the most desirable from a development process point of view, and #1 is the most desirable option from a business point of view (zero downtime).
So, I'm looking for some advice on this. Do most people take the whole system down? Are there 100% live systems that deal with this? Are there other approaches I'm not considering?
Any information would be greatly appreciated. Thanks.
View 4 Replies
View Related
Feb 6, 2001
Question:
How to prevent a user/admin on one SQL 7 server, who knows the system admin password that is common to both servers, from accessing a second SQL 7 server via the SQL Server Group setup process.
Is there a way from shutting off remote access to a SQL server without limiting RPC?
All reading points towards 1) Remote Access Options, 2) Store User Independent, 3) Control Store as options to locking down a server. Would like to hear from someone that ran into this type of issue. Third party software available?
I've tried the following without any success: 1) I have deleted the second SQL server registration from the first SQL server group - but this is too easy to delete and recreate, 2) edit the SQL server registration for the remote server and force authentication - almost there if SQL prevented deletion of the registration without verifying the logon/password of the person who created it (again able to delete and recreate), 3) played around with the client utility to remove the TCP/IP pipe entry.
Anyone else pulling their hair out on this?
TIA!
View 1 Replies
View Related
Dec 24, 2007
Hi everybody,
Currently we have a MIS application, developed in VB 6.0 - SQL Server 2000 platform, which is used by around 60 users in our office.
We are planning to host a website remotely, which would allow clients to place orders, track order status etc. on it.
Would it be possible to access our local SQL database from the remote website?
View 4 Replies
View Related
Nov 2, 2007
I have a web app that uses two SQL Express databases. One of the databases is the membership database. I am deploying the app to a hosted environment. Here is my connection string:
<add name="Akamojo_APSNETDB" connectionString="Data Source=.SQLExpress; AttachDBFileName=|DataDirectory|Akamojo_ASPNETDB.mdf; Initial Catalog=Akamojo_ASPNETDB; Integrated Security=true; User Instance=true"/>
Here is the error that I get:
Could not open new database 'Akamojo_ASPNETDB'. CREATE DATABASE is aborted.
Cannot attach the file 'e:hostingmemberakamojoTournamentLogApp_DataAkamojo_ASPNETDB.mdf' as database 'Akamojo_ASPNETDB'.
File activation failure. The physical file name "c:inetpubwwwrootTournamentLogApp_DataAkamojo_ASPNETDB_log.LDF" may be incorrect.
The log cannot be rebuilt when the primary file is read-only.
The mdf file is not read only. In the hosted environment the database is on the E drive. In my dev environment the database is on the C drive. From the error message, it appears that when it tries to build the log file it is trying to build it on the C drive in a path that doesn't exist in the hosted environment.
Any help is greatly appreciated.
-Darrell
View 1 Replies
View Related
May 24, 2000
I backed up a database from one server and restored in it on another server
the database was installed with data, but the security info did not
get across.
thanks
View 1 Replies
View Related
Mar 28, 2002
ask2much writes "I am trying to write a script that will audit my sql servers looking for weaknesses etc. I need it to report things like users with NULL paswords, users with excessive acces rights, users with direct access to tables, etc. I need a query that will give me a list of all the users in the server, the last time they logged in, and the last time they changed their password. How can I accomplish this? also if any one has already created a script similar to the one I am trying to create, could I please take a look at it to get some ideas?
thank you,
FV."
View 1 Replies
View Related
Oct 3, 2005
Hello all,
I hope someone can help with my current issue as i have now spent the last 8
hours trying to solve it! Here goes...
I am currently moving all my websites from our in house set up to a FASTHOSTS
dedicated server. Our in house set up consists of separate server for web
and data and works well even with my recent foray into .Net sites.
I have just moved the most recent of my .Net sites
(http://www.alfadealerads.co.uk/home.aspx) to the FASTHOSTS server and cannot
get the site to connect to the database (this has also been installed on the
FASTHOSTS server). One of the pages that connects to the DB is
http://www.alfadealerads.co.uk/links.aspx, where i am getting the error..
System.Data.SqlClient.SqlException: Cannot open database requested in login
'MasseratiChauffeurDrive'. Login fails.
Login failed for user 'lateral'.
This DB has been restored from back up from the original DB. I have
recreated the user name on the new SQL server and added it to the new DB
also. I am using a webconfig to connect to the DB, the exact same one
that works on my current live server
(http://www.maseratichauffeurdrive.com/home.aspx) only with the obvious change
to the SQL server name.
The only difference i can see in the 2 setups is that the new one has both the
webserver and the SQL server on the one machine and that machine uses domains.
My current in house setup does not use domains and as mentioned before web and
date are 2 separate servers.
Can anyone help? Or even understand what the hell i have written? lol
Thanks in advance
View 3 Replies
View Related
Jun 3, 2015
SQL server, by-mistake I updated values of a column in a database hosted online, is there any way undo the transaction. I didn't created any backup of the database. I read that still it can be recovered through the .ldf (log file) but unable to access it. Is there anyway to get access of the Log file or is there any way to recover the data.
View 1 Replies
View Related
Jul 15, 2015
I am setting up SQL audit on sql servers in my environment based on requirement. I want to create database specifications ASAP database created. I tried DDL trigger but Audit doesn't support triggers. So I created audit specifications on model database. the only problem with this is every specification created on new database with same name.database specification name includes newly created database name or other methods to create database specifications on newly created databases.
View 6 Replies
View Related
Jul 30, 2015
In SSMS, I connect Object Explorer to a partially contained database using a contained user login with password. This user has a database role of dbdatareader. When I try to expand the Tables in the database, I get the error:
The SELECT permission was denied on the object 'extended_properties', database 'mssqlsystemresource', schema 'sys'. (Microsoft SQL Server, Error: 229)
Is there a way to set permissions for the contained user so that this could be done?
View 4 Replies
View Related
Jul 2, 2015
I had created 2 Sql server instance in 2 servers created using VMware. From the primary server I log shipped the required databases into the secondary. Both the servers were in the same domain whose active directory was also in another server in the same virtual lab environment. My question can we have the primary sql server in one domain and the secondary sql server to which the logs are shipped in another domain by including a router also between the 2 networks for connectivity?
View 6 Replies
View Related
Oct 26, 2015
I have installed new SQLServer2012 instance and my domain user have sysadmin privileges on this instance. I have a restore procedure and it will execute WITH EXECUTE AS 'domainmy username', for all the developers have exec permissions to this procedure. But newly installed server this procedure was failing with the following message. But the same procedure executing fine on other servers.
Msg 262, Level 14, State 1, Line 1
CREATE DATABASE permission denied in database 'master'.
Msg 3013, Level 16, State 1, Line 1
RESTORE DATABASE is terminating abnormally.
View 7 Replies
View Related
Jul 20, 2015
I have a script that automates some db drop/restore operations and bringing the database to single user mode is part of it: ALTER DATABASE ... SET SINGLE_USER WITH ROLLBACK IMMEDIATE...I want this to executes under a login, that has restricted privileges, so I've created a login and granted it a dbcreator role + ALTER ANY DATABASE privileges.
Problem: When I run the script against a database with an active/sleeping connection:It fails when using the restricted login: "Msg 5061...ALTER DATA BASE failed because a lock could not be placed on database ..."It completes successfully when using a sysadmin login According to stackoverflow.com the solution is to kill the active/sleeping connections to the database, before ALTER-ing it, which works fine, but the question is....
Questions: Why the "ALTER DATABASE..." statement works under the sysadmin login, but not under a dbcreator one?Does this mean the sysadmin login kills the connections to the target database in the background?Is it possible to grant additional privileges to the restricted login, so the "ALTER DATABASE..." statement won't need preventive killing of the connections?
View 5 Replies
View Related
Mar 7, 2008
Can I know about this ? I prefer to apply locks on database level and also to row level.
Is it possible or advicable ?
View 4 Replies
View Related
Apr 26, 2007
i have a development database that has updates and changes to a production database. rather than go through individually and alter all relevant tables and stored procedures, id like to back up the database on the development side and restore it on the production side as the production database. is there a way to restore the database on the production server but preserve all the security settings (ie logins and such)? i noticed on our development server, that if i try to restore the database with my development database, it overwrites the users and/or if the user is the same on both, it removes the login name for that user.
View 3 Replies
View Related
Nov 6, 2005
coycoy wrote:you wanted to join some columns coming from two different tables...right? if that so, use an SQL query. Try using the "inner join" statement.
i wanted to combine the data from two tables. these two tables belong to different servers: table1 is from sql server found in cerebrum station and table2 is from mysql server found in copernicus station. i have this code but the problem is i can only use this code if the two tables belong in the same database server.
</P>
<P>string limitReghrsvalue = "select statuslog.ActId as STATUS_ID,DalsDataNew.ID as MANHOUR_ID,statuslog.ActDate as DATE,statuslog.PrjCode as PROJECT_CODE,statuslog.MapNumber as MAP_NUMBER,statuslog.Activity_Code as ACTIVITY_CODE,DalsDataNew.ActivityMedium as MEDIUM_CODE,statuslog.RegHrs AS REGHOURS,statuslog.OTHrs AS OTHOURS,statuslog.Status AS STATUS,DalsDataNew.Flag,DalsDataNew.Approvedby from statuslog,DalsDataNew where statuslog.PrjCode = DalsDataNew.ProjectCode and statuslog.PIN = DalsDataNew.PIN and statuslog.ActDate = DalsDataNew.Date and statuslog.Activity_Code = DalsDataNew.ActivityCode and statuslog.RegHrs = DalsDataNew.RegHours and statuslog.OTHrs = DalsDataNew.OTHours and statuslog.PIN = 'P120' and statuslog.ActDate >= '"+this.firstdate.Text+"' and statuslog.ActDate <= '"+this.lastdate.Text+"'";</P>
<P>
Sql Server in Cerebrum: database dals
DalsData
ID | Date | PIN | ProjectCode | ActivityCode | ActivityMedium | RegHrs | OTHrs | Approvedby | Flag
123 |9/17/2005| P120| 1234 | B | W(P) | 5.50 | 0.00 | P083 | 1
124 |9/17/2005| P120| 1234 | I | W(PC) | 1.50 | 2.25 | |
MySqlServer in Copernicus: database stat
Statuslog
ActID | ActDate | PIN | ProjectCode | MapNumber | ActivityCode | RegHrs | OTHrs | Status(%)
1 | 2005-9-17 | P120 | 1234 | map01 | B | 5.50 | 0.00 | 100
2 | 2005-9-17 | P120 | 1234 | map01 | I | 1.50 | 2.25 | 75
the output in datagrid should be:
ID | ActID | Date | ProjectCode | ActivityCode | MediumCode | MapNumber | RegHrs | OTHrs | Status | Approvedby | Flag
123| 1 |9/17/2005| 1234 | B | W(P) | map01 | 5.50 | 0.00 | 100 | P083 | 1
124| 2 |9/17/2005| 1234 | I | W(PC) | map01 | 1.50 | 2.25 | 75 | | could someone help me how would i do this?
View 5 Replies
View Related
Feb 16, 2004
Dear All,
I am trying to create a trigger on table A existing in Database A on Server A which on insert,update,delete would reflect these changes on table B in DatabaseB on Server B. I wrote the following syntax but it doesnt work
CREATE trigger trg_upd_tableA
On dbo.tableA
for UPDATE
as
--update the fields
declare @cust_no varchar
SELECT @cust_no = cust_no FROM inserted
update ServerB.DatabaseB.dbo.tableB
set
entity_type_cd = 'MFG',
cust_no = 6699,
name_en = 'NOVARTIS',
status ='A',
create_date=getdate()
,modify_date=getdate()
where cust_no= @cust_no
I get the error below
Another user has modified the contents of this table or view ; the database row you are modifying no longer exists in the database
Database Error: '[Microsoft][ODBC SQL Server Driver][SQL Server] MSDTC on server 'DatabaseB' is unavailable'
I would like anyone to reply to me as soon as possible please because i need the solution urgently
Thanks alot in advance,
Noha
View 2 Replies
View Related
Apr 14, 2004
How to backup database on the other servers in the LANS.
View 8 Replies
View Related
Apr 10, 2008
I am attempting to move a User Database from the Production Server to a Training Server. What is the best/most simplistic way for me to accomplish this task and place this copying action on a schedule of say "every saturday morning @ 7am"
I tried the "Copy Database Wizard" within Enterprise Manager and it successfully copies the database, however when I try to schedule it to happen at a different time...it does not copy the database. It seems to only work when I tell it to perform this action now.
Please help.
Thanks,
JC
View 11 Replies
View Related
May 8, 2008
Hello All,
I need some help with a web application we are running. Is it possible to have 2 seperate instances of SQL 2005 running and each one pointing to the same DB. We want to load balance our users on the different DB servers. They are performing read and write transactions.
Any suggestions.
View 3 Replies
View Related
Dec 9, 2007
Hi,
I've got two servers with sql 2005 express on, the first is a shared server at our isp, we rent one database from them. The other server is our own and we have full sa access.
Is there an easy way to copy the database from the shared server onto our own server. We're unable to use the backup.
Thanks
View 3 Replies
View Related
Sep 18, 2007
Hi,
I read the following article related to "Federated Database Servers" But i am not getting what is this "Federated Database Servers", May be the language of this article i think little bit difficult. So, can anyone please explain me this.
Wht are thse servers and when, why and where we use these servers?????
http://msdn2.microsoft.com/en-us/library/aa213244(SQL.80).aspx
Thanks,
View 2 Replies
View Related
Dec 1, 2006
hello friends,
I need to transfer my database from one server to database on another server every 24 hours. I can create windows application but it will be cumbersome to write bulk of code . So can u suggest me some service or any other way through query or stored procedure by job scheduling which can run every 24 hours and move my data from one database on one server to another sql database. Both databases are sql server 2000 but servers are diffeerent so how to connect them while transferring dbs. ? plz help me , its urgent.
regards,
max
View 3 Replies
View Related
Dec 17, 2004
I just added a 30MB SQL Server 2000 space for my site.
My host said that it only provides the space and nothing else. They will not be providing any means to connect to the database like Enterprise Manager 2000 or MS Client Network Utility. I'm not familiar with any of these and I looked at Microsoft's site to download it but I cannot find it.
Do you have any suggestions on how I go about setting up my hosted SQL Server? If those utilities are costly, are there cheaper/free alternatives?
Thanks.
View 3 Replies
View Related
