在所有數據庫，所有列和所有表中搜索字符串（SQL Server 2008 R2）

Question

我們在SQL Server中遭受某種入侵。

我試圖在每個數據庫中查找每個表格中每個列的單詞abortion和cheat。

我可以用這個查詢做到這一點，但在一個單一的數據庫。

-- Store results in a local temp table so that. I'm using a 
-- local temp table so that I can access it in SP_EXECUTESQL. 
create table #tmp 
(
    db varchar(max), 
    tbl nvarchar(max), 
    col nvarchar(max), 
    val nvarchar(max), 
); 

declare @db nvarchar(max); 
declare @tbl nvarchar(max); 
declare @col nvarchar(max); 
declare @q nvarchar(max); 

declare @search nvarchar(max) = 'abortion'; 

-- Create a cursor on all columns in the database 
declare c cursor for 
    SELECT 
     DB_NAME(DB_ID()) as DBName, tbls.TABLE_NAME, cols.COLUMN_NAME 
    FROM INFORMATION_SCHEMA.TABLES AS tbls 
    JOIN INFORMATION_SCHEMA.COLUMNS AS cols ON tbls.TABLE_NAME = cols.TABLE_NAME 

-- For each table and column pair, see if the search value exists. 
open c 

fetch next from c into @db, @tbl, @col 

while @@FETCH_STATUS = 0 
begin 
    -- Look for the search key in current table column and if found add it to the results. 
    SET @q = 'INSERT INTO #tmp SELECT ''' +@db+''',''' + @tbl + ''', ''' + @col + ''', ' + @col + ' FROM ' + @tbl + ' WHERE ' + @col + ' LIKE ''%' + @search + '%''' 
    EXEC SP_EXECUTESQL @q 
    fetch next from c into @db, @tbl, @col 
end 
close c 
deallocate c 

-- Get results 
select distinct db,tbl,col from #tmp 

-- Remove local temp table. 
drop table #tmp 

我怎樣才能找到這些字符串？結果集應該是：

DATABASE | TABLE | COLUMN 

我不需要的結果（文本字段），我需要爲select distinct表和列，因爲這將是一個很大的abortion在同一個表/列。

Answer 1

雖然一般不鼓勵使用無證sp_msforeachdb，我的本能會現有的代碼發送到這個過程是這樣的：

exec sp_MSforeachdb 'USE [?]; 
-- Store results in a local temp table so that. I'm using a 
-- local temp table so that I can access it in SP_EXECUTESQL. 
create table #tmp (
db varchar(max) , 
    tbl nvarchar(max), 
    col nvarchar(max), 
    val nvarchar(max), 

); 

declare @db nvarchar(max); 
declare @tbl nvarchar(max); 
declare @col nvarchar(max); 
declare @q nvarchar(max); 

-------------------------------------------------------------------------------------------- 
declare @search nvarchar(max) = ''abortion''; 
-------------------------------------------------------------------------------------------- 


-- Create a cursor on all columns in the database 
declare c cursor for 
SELECT DB_NAME(DB_ID()) as DBName,tbls.TABLE_NAME, cols.COLUMN_NAME FROM INFORMATION_SCHEMA.TABLES AS tbls 
JOIN INFORMATION_SCHEMA.COLUMNS AS cols 
ON tbls.TABLE_NAME = cols.TABLE_NAME 

-- For each table and column pair, see if the search value exists. 
open c 
fetch next from c into @db, @tbl, @col 
while @@FETCH_STATUS = 0 
begin 
    -- Look for the search key in current table column and if found add it to the results. 
    SET @q = ''INSERT INTO #tmp SELECT '''''' +@db+'''''','''''' + @tbl + '''''', '''''' + @col + '''''', '' + @col + '' FROM '' + @tbl + '' WHERE '' + @col + '' LIKE ''''%'' + @search + ''%'''''' 
    EXEC SP_EXECUTESQL @q 
    fetch next from c into @db, @tbl, @col 
end 
close c 
deallocate c;' 

這裏唯一添加的代碼是第一線，爲其餘代碼只需確保將'替換爲''即可。 USE [?]中的?是一個特殊字符，表示sp_MSforeachdb循環中當前活動的數據庫執行。