Click here to Skip to main content
15,894,362 members
Home / Discussions / Database
   

Database

 
GeneralRe: Cross post. Please ignore this thread. Pin
Paul Conrad23-Nov-07 8:30
professionalPaul Conrad23-Nov-07 8:30 
Questiondividing Pin
legend_of_zanado22-Nov-07 1:37
legend_of_zanado22-Nov-07 1:37 
AnswerRe: dividing Pin
andyharman22-Nov-07 1:53
professionalandyharman22-Nov-07 1:53 
Questionhow to make many foreign key from one table [modified] Pin
Xmen Real 22-Nov-07 0:50
professional Xmen Real 22-Nov-07 0:50 
QuestionRegarding select Date Pin
Aavesh Agarwal21-Nov-07 22:33
Aavesh Agarwal21-Nov-07 22:33 
AnswerRe: Regarding select Date Pin
joemonvarghese21-Nov-07 23:58
joemonvarghese21-Nov-07 23:58 
QuestionHow to run Dynamic SQL Query Securely? Pin
DotNetWWW21-Nov-07 22:31
DotNetWWW21-Nov-07 22:31 
AnswerRe: How to run Dynamic SQL Query Securely? Pin
Colin Angus Mackay21-Nov-07 22:46
Colin Angus Mackay21-Nov-07 22:46 
A few quick tips:
* Use parameters as much as possible.
* Validate EVERYTHING.
* If you are needing to dynamically set the name of tables or columns then have your SQL check the existance of the table first (A lookup on INFORMATION_SCHEMA.TABLES and INFORMATION_SCHEMA.COLUMNS will help here - remember to use parameters to pass the table name)
* Validate EVERYTHING.
* Run the code in the most restrictive account possible.
* Validate EVERYTHING.* Call stored procedures and have the SP validate the parameters and generate the dynamic SQL.
* Validate EVERYTHING.


Upcoming FREE developer events:
* Developer! Developer! Developer! 6
* Developer Day Scotland

My website

QuestionBulk Export Task Pin
RAGHAVENDRAN200721-Nov-07 20:22
RAGHAVENDRAN200721-Nov-07 20:22 
Questionplzz help me... Pin
potlakayala21-Nov-07 20:12
potlakayala21-Nov-07 20:12 
AnswerRe: plzz help me... Pin
Colin Angus Mackay21-Nov-07 21:35
Colin Angus Mackay21-Nov-07 21:35 
Questionerror Pin
mahenputta21-Nov-07 19:09
mahenputta21-Nov-07 19:09 
AnswerRe: error Pin
Joe21-Nov-07 19:12
Joe21-Nov-07 19:12 
GeneralRe: error Pin
mahenputta21-Nov-07 19:24
mahenputta21-Nov-07 19:24 
Questionhow to display table column data are starting letter in capital letter Pin
Murugan.nett21-Nov-07 8:28
Murugan.nett21-Nov-07 8:28 
Answercross post Pin
pmarfleet21-Nov-07 8:42
pmarfleet21-Nov-07 8:42 
GeneralRe: cross post Pin
Paul Conrad23-Nov-07 8:33
professionalPaul Conrad23-Nov-07 8:33 
QuestionSql Server 2005 indexing Pin
Chazzysb21-Nov-07 7:21
Chazzysb21-Nov-07 7:21 
AnswerRe: Sql Server 2005 indexing Pin
Hesham Amin21-Nov-07 10:58
Hesham Amin21-Nov-07 10:58 
QuestionReader problem Pin
kjosh21-Nov-07 6:50
kjosh21-Nov-07 6:50 
AnswerRe: Reader problem Pin
Frank Kerrigan21-Nov-07 10:05
Frank Kerrigan21-Nov-07 10:05 
AnswerRe: Reader problem Pin
Prateek G21-Nov-07 20:24
Prateek G21-Nov-07 20:24 
GeneralRe: Reader problem Pin
Colin Angus Mackay21-Nov-07 22:35
Colin Angus Mackay21-Nov-07 22:35 
GeneralRe: Reader problem Pin
Prateek G21-Nov-07 22:44
Prateek G21-Nov-07 22:44 
GeneralRe: Reader problem Pin
Colin Angus Mackay21-Nov-07 22:50
Colin Angus Mackay21-Nov-07 22:50 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.