Re: Security violation by my host

Hi,

Cannot answer your question directly as you need legal advice however in the
mean time I would sugest adding encryption to you stored procedure as
follows:

CREATE PROCEDURE MyProcedure @Pramr1 int, @AnotherParam nvarchar(10), ....

WITH ENCRYPTION

AS

.SQL code

GO

This will encrypt the SP in the database so if anyone opens it will be
unreadable. A word of warning make sure you have the SP code some where
safe.

- Mike

---------------------------------------------------------------------------------
<a href="http://www.cogitar.net";> Cogitar Software. (
http://www.cogitar.net ) </a>
http://www.cogitar.net Cogitar Software. (Software Development and Managment
Systems)
http://www.web-dominion.co.uk Web-Dominion. (Web Design and hosting )
http://shop-dominion.com (senery landscape pictur gallery)
---------------------------------------------------------------------------------


"Jenny" <barroli@xxxxxxxxxx> wrote in message
news:evmGLKdfHHA.4636@xxxxxxxxxxxxxxxxxxxxxxx
Hi!

Can somebody tell me if I have the right to sue my hosting company that is
keeping my SQL Server DB on one of its shared servers as I found out that
all other clients that are hosted on the same server as me have access to
my stored procedure codes and tables structures.
They can't actualy see inside all my tables I think but I can't be sure as
I could actually open one of other user's tables (just 1 in the whole DB)
to see if they set any permissions.
Isn't my sp code supposed to be protected?
And I'm not even sure what else the other users can do to my DB as I
haven't tried much to penetrate other users' property but I'm sure that a
skillful SQL Server admin can access what he wants in a DB like this.
I stored hundreds of credit cards in one of my tables (not anymore as I
hashed them) and I don't even know if they had been already stolen or not.
There should be a law against all that or am I mistaking.

Thank you.

Jenny



.

Relevant Pages

  • Re: Switching a Forms Recordsource at RunTime to a SP w/ a Parameter
    ... using the MDB but link it to SQL Server if you need to support more users or ... > then opens the target form. ... > Pass the Parameter or Assign the Stored Procedure to the Form's ... > Dim cmd As ADODB.Command ...
    (microsoft.public.access.adp.sqlserver)
  • RE: Preventing access to Process Info
    ... One approach is to create a dynamic stored procedure with Encryption, ... Is there a way to do this (SQL Server configuration/permissions/encryption)? ... Could try to somehow kill the process that logs the SQL query to Sql Server ...
    (microsoft.public.sqlserver.security)
  • Re: Select Statement: Join vs Inner Select
    ... The procedure creation supports a WITH ENCRYPTION option that can used to ... encrypt the contents of the stored procedure. ... >> have a copy of it on your local machine (or source control software). ... I wonder SQL Server could ...
    (microsoft.public.sqlserver.programming)
  • Re: How to get list of EventClasses in MSSQLServer2000
    ... statement inside a stored procedure has completed.') ... SQL Server statement or stored procedure.') ... Plan','Displays the plan tree of the Transact-SQL statement executed.') ... Login','Occurs when a SQL Server login is added or removed; ...
    (microsoft.public.sqlserver.security)
  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)