We recently switched one of our applications to Application Role security, which mandates (because the backend is SQL2000) that we turn off .NET Connection pooling for the sql connections that use the ...

I have an IIS Web server on my DMZ with two IP addresses assigned to one NIC. I have set the bindings in IIS to run each of the two sites on separate IP addresses. The problem is both sites initiate ...

An apparent rash of SQL injection attacks on Web sites was reported by a Finnish security firm late last week, though a case of "guilt by implication" led to speculation that a privilege escalation ...

There's been a lot of noise and violent thrashing over the last couple days regarding a flaw that was originally believed to be a flaw in Microsoft's IIS (Internet Information Server), but has since ...