Originally posted by Perhentian
Theres two other things that I did with the XML support for IIS in SQL Server
a. Set the config so that only the XML templates that you define yourself as DBA may be accessed. The XML templates contain the SQL queries to run and handle any incoming parameters. This is actually pretty good as the templates allow you to do a lot of XML type stuff and pass the parameters the URL easily. However the templates are just stored on the disk and not within the database structure.
b. If its only 1 server (or computer) that needs access you can lock down access to limited IPs
Leave a comment: