Ehm...cukup pelik juga nih permasalahannya. Bet, saya cuma kasih 
kisi2 aja.

1. Pastikan DB Server-nya punya patch terbaru
2. Password sa jangan dikasih default dong!
3. hati2 dengan system extended store procedure xp_cmdshell, pastikan 
hanya user tertentu/sa yg punya aksesnya (kalau perlu buang/delete)
4. lebih baik, buang/delete semua default store procedure
5. filter semua keluaran output karakter seperti ',",--,:,dll
6. Blok port 1433/1434 dengan menggunakan firewall

dah ah, segitu dulu. mau lengkapnya baca aja di sqlsecurity.com

wassalam





-----------------------------------------------
IndoPB - Indonesia PB User Group 
An Indonesian PowerBuilder User Group's Event
2nd PowerBuilder Update
Rumah Sakit Jantung Harapan Kita
26/27 August 2006
To Register : 
http://groups.yahoo.com/group/indopb/database?method=addRecord&tbl=4 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/indopb/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/indopb/join
    (Yahoo! ID required)

<*> To change settings via email:
    mailto:[EMAIL PROTECTED] 
    mailto:[EMAIL PROTECTED]

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 

Kirim email ke