Database

9-Jun-09 20:59

Dear All,
I have sql query which is

create proc sp_detail
(
@p varchar(max)
)
as
select * from tblName where code in (@p)
go

and i am calling it like following

declare @codes varchar(max)
select @codes=cast(quotename('28-2801','''')+','+quotename('28-2802','''') as varchar(max))
print @codes
exec [sp_getCommunityDetail] @codes

this doesent work, while i have records in table.
i want to do like this
select * from tblName where code in ('28-2801','28-2802',....)
how can i acheieve it in procedure and how do i pass such thing to procedure?

Abdul Rahaman Hamidy
Database Developer
Kabul, Afghanistan

Vimalsoft(Pty) Ltd9-Jun-09 21:25

9-Jun-09 21:25

Good Morning Abdul

Stop Stop Stop Stop Stop

You created a SP called sp_detail

and you said you calling it in the Seconds statements, but there is no place in the second statement you are using the created sp.

i don't see the created Sp has anything to do with

declare @codes varchar(max)
select @codes=cast(quotename('28-2801','''')+','+quotename('28-2802','''') as varchar(max))
print @codes
exec [sp_getCommunityDetail] @codes

please before you post make sure you are posting the right things, it seems you posted the wrong Sp

Vuyiswa Maseko,

Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers."

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.somee.com
http://www.vuyiswamaseko.tiyaneProperties.co.za
vuyiswa@its.co.za
http://www.itsabacus.co.za/itsabacus/

Abdul Rahman Hamidy9-Jun-09 21:44

9-Jun-09 21:44

oh i am really sorry, u r right, but the name of procedure was written wrong in here, that is infact sp_detail, i am really sorry again, would u please help me?

Abdul Rahaman Hamidy
Database Developer
Kabul, Afghanistan

Vimalsoft(Pty) Ltd9-Jun-09 22:04

9-Jun-09 22:04

Good Morning Abdul

If you have create Your Sp like this

create proc sp_detail
(
@p varchar(max)
)
as
select * from tblName where code in (@p)
go

if you want to execute it , you have to do the Following

declare @codes varchar(max)
select @codes=cast(quotename('28-2801','''')+','+quotename('28-2802','''') as varchar(max))
exec [sp_detail] @codes

Now to understand the Second problem you are Having, if you say it doesnt work , do you get any sort of Error or you get a logical error , please give more info.

Vuyiswa Maseko

Abdul Rahman Hamidy9-Jun-09 22:18

9-Jun-09 22:18

i am getting no record, while there is record in table
if i use the select statement instead of procedure i can get the result

select * from tblName where code in ('28-2801','28-2802',....)
return 2 rows, while procedure returns zero (0) rows.

Abdul Rahaman Hamidy
Database Developer
Kabul, Afghanistan

Ashfield10-Jun-09 1:16

Ashfield

10-Jun-09 1:16

It won't work. You need to use dynamic sql to do this, sql server does not evaluate the variable. ALternatively, split the variable into a temp table of some sort.

Bob
Ashfield Consultants Ltd
Proud to be a 2009 Code Project MVP

Abdul Rahman Hamidy10-Jun-09 1:33

10-Jun-09 1:33

yeah, i wrote a function which it was splitting the string based on comma, and then inserting those into the temp table. the temp table had my code in records, but still the procedure didnt worked that way too.
i think there is something tricky in such cases, i am searching to find that case. i need your help too.

Abdul Rahaman Hamidy
Database Developer
Kabul, Afghanistan

Ashfield10-Jun-09 2:58

Ashfield

10-Jun-09 2:58

Well, its a fairly simple join.

declare @Split TABLE (.....)
insert into @Split
	select .. from your_split_function

select * from table t1
join @split s on s.code = t1.code

if it still fails to return records make sure you are trimming spaces from the values in your split function

Bob
Ashfield Consultants Ltd
Proud to be a 2009 Code Project MVP

Abdul Rahman Hamidy10-Jun-09 23:00

10-Jun-09 23:00

thank dude, this method is very cool, trimming mostly solved my issue

Abdul Rahaman Hamidy
Database Developer
Kabul, Afghanistan

Setting password to my own SQL database.

Ashfield11-Jun-09 1:29

Ashfield

11-Jun-09 1:29

Please to have helped

Bob
Ashfield Consultants Ltd
Proud to be a 2009 Code Project MVP

deepseeindeepsy9-Jun-09 20:23

deepseeindeepsy

9-Jun-09 20:23

Hi,

I want to protect my database with ID & Password.
How it will be done. Smile | :)

Vimalsoft(Pty) Ltd9-Jun-09 21:07

9-Jun-09 21:07

Sometimes its difficult to answer questions like this in the Forums , because people don't give us enough information. We have to help them and think what they are trying to achieve. let me tell you what came into my mind when i saw your question.

Because if you are having an SQL Database is Hosted into the SQl Server and that Server is Protected by a sa password or you can add more users or restrict other users from accessing your database from the permission of your Database. So you see , you did not give us enough information.

deepseeindeepsy9-Jun-09 21:47

deepseeindeepsy

9-Jun-09 21:47

i dont want my client will access my database in server.
now tel me is there any way to avoid this?

Vimalsoft(Pty) Ltd9-Jun-09 21:59

9-Jun-09 21:59

Its Simple, Dont give the Password to the Server, if they know it change it

Jerry Hammond10-Jun-09 5:36

Jerry Hammond

10-Jun-09 5:36

You're not the dbowner?

"My interest is in the future because I'm going to spend the rest of my life there." - Charles F. Kettering

deepseeindeepsy11-Jun-09 18:45

deepseeindeepsy

11-Jun-09 18:45

Hi,
Sir, I m using SQL SERVER 2005 in Windows authentication mode. Anybody on my PC can access the server by using same authentication. That means they can access their own database but they also can access my own too & I don't want to have access to them.

I want to secure my particular on Wink | ;)

ly.
I think it is more clesr now.

Please help.

Vimalsoft(Pty) Ltd11-Jun-09 20:31

11-Jun-09 20:31

Now in that case , Change the Authentication and use SQL Authentication. This means you have to give up Windows Authentication and have a spacial credentials for your Database Remove your Windows username from the Permissions of the Database and Add a new username that can only be used by you, then in that case you and only you can access the DB. remember the Windows Authentication does not even ask you for a password as long as you have the correct username the user can enter and that is not advisable in a secure environment.

Hope it helps

Isaac Gordon10-Jun-09 0:13

Isaac Gordon

10-Jun-09 0:13

Many Time I am Also Suffer From this Problem but at a long time i find a solution
about this problem's.
First you Have To Change Window Authentication mode to mix mode authentication.
use Done this by Done From Inside SQL Server Object Explore\Properties\Security\Server Authentication Change to mix mode Authentication
or
by using Query run in Window Authentication mode
1)EXEC xp_instance_regwrite N'HKEY_LOCAL_MACHINE', N'Software\Microsoft\MSSQLServer\MSSQLServer', N'LoginMode', REG_DWORD, 2

2)Alter login sa enable
3)Alter login sa with password ='[abc]' --any Password
4)EXEC sp_revokelogin 'BUILTIN\Administrators'
5)Restart you'r SQL Server Service
and Batch File in C#.NEt is
int iChar = 34;
char aChar = (char)iChar;
StreamWriter sStr = new StreamWriter(GetWorkingDir + "//SQLSEREVR.Bat");
sStr.WriteLine("@echo off ");
sStr.WriteLine(@"CD\");
sStr.WriteLine(@"osql -E -S .\sqlexpress -Q "+aChar.ToString()+"Alter login sa enable"+aChar.ToString()+"");
sStr.WriteLine(@"osql -E -S .\sqlexpress -Q " + aChar.ToString() + "Alter login sa with password ='[abc]'" + aChar.ToString() + "");
sStr.WriteLine("Net stop " + aChar.ToString() + "SQL Server (SQLEXPRESS)" + aChar.ToString() + "");
sStr.WriteLine("Net start " + aChar.ToString() + "SQL Server (SQLEXPRESS)" + aChar.ToString() + "");
sStr.WriteLine(@"osql -E -S .\sqlexpress -Q " + aChar.ToString() + @"EXEC sp_revokelogin 'BUILTIN\Administrators'" + aChar.ToString() + "");
sStr.WriteLine("Net stop " + aChar.ToString() + "SQL Server (SQLEXPRESS)" + aChar.ToString() + "");
sStr.WriteLine("Net start " + aChar.ToString() + "SQL Server (SQLEXPRESS)" + aChar.ToString() + "");

string sBatchFileName = GetWorkingDir + "//SQLSEREVR.Bat";