Be wary of stored procedures like sp_OACreate and xp_cmdshell that allow T-SQL to execute arbitrary external code.

• 对于允许T-SQL执行任意外部代码的存储过程,要非常注意,如sp_OACreate和xp_cmdshell。