講解SQLServer危險(xiǎn)擴(kuò)展存儲(chǔ)刪除和恢復(fù)

字號(hào):

將有安全問(wèn)題的SQL過(guò)程刪除.比較全面.一切為了安全! 刪除了調(diào)用shell,注冊(cè)表,COM組件的破壞權(quán)限 MS SQL SERVER2000
    使用系統(tǒng)帳戶登陸查詢分析器
    運(yùn)行以下腳本:
    use master
    exec sp_dropextendedproc 'xp_cmdshell'
    exec sp_dropextendedproc 'xp_enumgroups'
    exec sp_dropextendedproc 'xp_loginconfig'
    exec sp_dropextendedproc 'xp_enumerrorlogs'
    exec sp_dropextendedproc 'xp_getfiledetails'
    exec sp_dropextendedproc 'Sp_OACreate'
    exec sp_dropextendedproc 'Sp_OADestroy'
    exec sp_dropextendedproc 'Sp_OAGetErrorInfo'
    exec sp_dropextendedproc 'Sp_OAGetProperty'
    exec sp_dropextendedproc 'Sp_OAMethod'
    exec sp_dropextendedproc 'Sp_OASetProperty'
    exec sp_dropextendedproc 'Sp_OAStop'
    exec sp_dropextendedproc 'xp_regaddmultistring'
    exec sp_dropextendedproc 'xp_regdeletekey'
    exec sp_dropextendedproc 'xp_regdeletevalue'
    exec sp_dropextendedproc 'xp_regenumvalues'
    exec sp_dropextendedproc 'xp_regremovemultistring'
    exec sp_dropextendedproc 'xp_regwrite'
    drop procedure sp_makewebtask
    go
    刪除所有危險(xiǎn)的擴(kuò)展:
    exec sp_dropextendedproc 'xp_cmdshell' [刪除此項(xiàng)擴(kuò)展后,將無(wú)法遠(yuǎn)程連接數(shù)據(jù)庫(kù)]
    以下3個(gè)存儲(chǔ)過(guò)程會(huì)在SQL SERVER恢復(fù)備份時(shí)被使用,非必要請(qǐng)勿刪除
    #exec sp_dropextendedproc 'xp_dirtree' [刪除此項(xiàng)擴(kuò)展后,將無(wú)法新建或附加數(shù)據(jù)庫(kù)]
    #exec sp_dropextendedproc 'Xp_regread' [刪除此項(xiàng)擴(kuò)展后, 還原數(shù)據(jù)庫(kù)輔助]
    #exec sp_dropextendedproc 'xp_fixeddrives' [刪除此項(xiàng)擴(kuò)展后,將無(wú)法還原數(shù)據(jù)庫(kù)] 恢復(fù)腳本
    use master
    EXEC sp_addextendedproc xp_cmdshell ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_enumgroups ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_loginconfig ,@dllname ='xplog70.dll'
    EXEC sp_addextendedproc xp_enumerrorlogs ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_getfiledetails ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc Sp_OACreate ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OADestroy ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAGetErrorInfo ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAGetProperty ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAMethod ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OASetProperty ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc Sp_OAStop ,@dllname ='odsole70.dll'
    EXEC sp_addextendedproc xp_regaddmultistring ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regdeletekey ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regdeletevalue ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regenumvalues ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regremovemultistring ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regwrite ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_dirtree ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_regread ,@dllname ='xpstar.dll'
    EXEC sp_addextendedproc xp_fixeddrives ,@dllname ='xpstar.dll'
    go
    全部復(fù)制到"SQL查詢分析器"
    點(diǎn)擊菜單上的--"查詢"--"執(zhí)行",就會(huì)將有安全問(wèn)題的SQL過(guò)程刪除。