Click here to Skip to main content
15,887,430 members
Home / Discussions / Web Development
   

Web Development

 
GeneralDare to Solve it Pin
vipul thakur31-Mar-05 4:12
vipul thakur31-Mar-05 4:12 
QuestionGoogle ads without javascript? Pin
tantiboh30-Mar-05 12:11
tantiboh30-Mar-05 12:11 
AnswerRe: Google ads without javascript?--follow up question Pin
JKroschel6-Apr-05 5:35
JKroschel6-Apr-05 5:35 
GeneralWeb Services Extract/Insert SOAP Body Pin
Poiema30-Mar-05 7:20
Poiema30-Mar-05 7:20 
GeneralCross domain Javascript Pin
Esmo200030-Mar-05 4:09
Esmo200030-Mar-05 4:09 
GeneralNull value Pin
Brendan Vogt29-Mar-05 19:14
Brendan Vogt29-Mar-05 19:14 
GeneralRe: Null value Pin
Colin Angus Mackay30-Mar-05 4:23
Colin Angus Mackay30-Mar-05 4:23 
GeneralRe: Null value [Additional] Pin
Colin Angus Mackay30-Mar-05 19:50
Colin Angus Mackay30-Mar-05 19:50 
A parameterised query is where you put a placeholder in the query string in your code and add a parameter object to the command which the framework will send to the database system. The separation of the query code from the variable data elements reduces the possibility of a SQL Injection Attack as the injected string can no longer have an effect on the SQL code.

A stored procedure is just a procedure that is written in SQL, not all database systems support the concept. Access supports a sort of semi-stored procedure like concept called Stored Queries which appear to be like a view that accepts parameters.

Some databases may not support Stored Procedures (e.g. MySQL doesn't yet support them, although I believe that the next version will).

Here are some links that show how parameterised queries work:
http://www.4guysfromrolla.com/webtech/021799-1.shtml[^]

http://www.4guysfromrolla.com/webtech/111798-1.shtml[^]

I don't full like the next example. It shows how to build an MS Access Stored Query that accepts parameters (so it is a sort of half way house between a Stored Procedure and a View - it takes parameters, but it can only perform a single select) but the code to call the query is open to an SQL Injection Attack as it just injects the values into an SQL String in order to call the "Access Stored Query" object:
http://www.xefteri.com/articles/show.cfm?id=6[^]

If these links don't help (they were just the first few results in a google search) it should be fairly easy to find more examples with the keywords or variations on them: Parameterized Query ADO




My: Blog | Photos | Next SQL Presentation
WDevs.com - Open Source Code Hosting, Blogs, FTP, Mail and More


GeneralASP Log off Section Pin
Brendan Vogt29-Mar-05 19:06
Brendan Vogt29-Mar-05 19:06 
GeneralRe: ASP Log off Section Pin
AlanJones20053-Apr-05 23:16
AlanJones20053-Apr-05 23:16 
GeneralJavaScript String Comparison Pin
Brendan Vogt29-Mar-05 19:02
Brendan Vogt29-Mar-05 19:02 
GeneralRe: JavaScript String Comparison Pin
Esmo200030-Mar-05 5:10
Esmo200030-Mar-05 5:10 
GeneralRe: JavaScript String Comparison Pin
Yulianto.30-Mar-05 14:45
Yulianto.30-Mar-05 14:45 
GeneralSession Persistence Pin
Brendan Vogt29-Mar-05 18:57
Brendan Vogt29-Mar-05 18:57 
GeneralRe: Session Persistence Pin
Esmo200030-Mar-05 5:14
Esmo200030-Mar-05 5:14 
GeneralRe: Session Persistence Pin
theJazzyBrain6-Apr-05 1:47
theJazzyBrain6-Apr-05 1:47 
GeneralRe: Session Persistence Pin
Anonymous6-Apr-05 9:10
Anonymous6-Apr-05 9:10 
QuestionJavascript "onsave" event?? Pin
Anonymous29-Mar-05 4:38
Anonymous29-Mar-05 4:38 
GeneralUse dll in web apllication but dllhost shutdown Pin
Anonymous28-Mar-05 17:24
Anonymous28-Mar-05 17:24 
GeneralStream live video in internet explorer. Pin
Narayana Vivek28-Mar-05 9:08
Narayana Vivek28-Mar-05 9:08 
Generallink get disconnected on accessing WebServices. Pin
Bobby.NET28-Mar-05 5:13
Bobby.NET28-Mar-05 5:13 
GeneralMore confused Pin
27-Mar-05 23:39
suss27-Mar-05 23:39 
GeneralRe: More confused Pin
Yulianto.28-Mar-05 16:08
Yulianto.28-Mar-05 16:08 
GeneralRe: More confused Pin
Member 173387829-Mar-05 6:28
Member 173387829-Mar-05 6:28 
GeneralRe: More confused Pin
Yulianto.29-Mar-05 15:45
Yulianto.29-Mar-05 15:45 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.