Security and compliance
Ensure data security and compliance with monitoring and change traceability
All products
SQL Code Analysis (40)
All databases
How to (40)
Problems with adding NOT NULL columns or making nullable columns NOT NULL (EI028)
Why you Should Avoid Using the @@IDENTITY Function
Simple SQL Change Automation Scripting: The Release Object
Integrating Redgate SQL Code Guard with SonarQube
Problems Caused by Use of the SQL_VARIANT Datatype
The '= NULL' Mistake and other SQL NULL Heresies
Insert Statement Without Column List (BP004)
INSERT code that omits a column list, usually in mysterious ways and often without generating errors. Phil Factor demonstrates the problem, and advocates a 'defense-in-depth' approach to writing SQL, in order to avoid it. Read moreUsing a Variable-length Datatype Without Explicit Length: The Whys and Wherefores (BP007/8)
(MAX) specification, which is a mistake too. Phil Factor explains the dangers and then offers a workaround for the problem, when… Read moreThe risks of using EXECUTE ('SQL Script')
Execute(string) to execute a batch in a string, often assembled dynamically from user input. This technique is dangerous because the parameter values are injected before the statement is parsed by SQL Server, allowing an attacker to "tag on"… Read more