I need to expose my SQL Server 2000 in the internet so that our small stores can update their daily Income and Expenses.

Problem 1. Hoping to trick SQL Injectors i changed our port to 7829(not real value). It worked for a while but one day we could no longer open our SQL Server and we had to reinstall our OS and SQL to have it up again. What must I do to prevent this from happening again. Using Zone Alarm Pro Software.

Problem 2. Is is possible to change PORT 1434.

Problem 3. I want to open the SQL Server in our branch using the Enterprise manager for easier querying but SQL Server cant seem to find it, what needs to be done?

Problem 4. How do I make MSDE use TCP/IP Protocol?

Using Windows XP Pro, Zone Alarm Pro Software

Proud To Be Pinoy

__________________
Proud To Be Pinoy

1) SQL Injectors ( I presume you mean SQL injection) are not dependent on the port. SQL Injection attacks work through your web client where in a text box the black hat puts in a ' and then some sql text i.e.
David' GO DROP DATABASE xyz, hoping that you build and execute your SQL strings dynamically.

2) Port 1434 is used to permit clients to get the list of instances with MS SQL Server and with SP 3 they did provide a way to turn this off

3) You need to set up an alias in the client network utility

4) You must configure this protocol in the Server Network Utility

David Lundell
Principal Consultant and Trainer
www.mutuallybeneficial.com