<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2008
»
SQL Server 2008 - General
»
Store procedure variable
17 posts, Page 2 of 2
««
1
2
Store procedure variable
Rate Topic
Display Mode
Topic Options
Author
Message
anthony.green
anthony.green
Posted Tuesday, February 05, 2013 8:57 AM
SSCertifiable
Group: General Forum Members
Last Login: Friday, April 12, 2013 3:51 AM
Points: 5,075,
Visits: 4,831
If the proc is in A and A is down, then they wont be able to run the proc as they cant get to A, so your logic is flawed.
What high availability routines do you have in place?
Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1
&
Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger
Post #1415918
adonetok
adonetok
Posted Tuesday, February 05, 2013 9:01 AM
SSC Veteran
Group: General Forum Members
Last Login: Friday, May 17, 2013 6:34 AM
Points: 219,
Visits: 431
Sorry, it is my fault. I did not make clear.
What I mean is [Order] table in serverA is not correct so that user need to use [Order] table in serverB.
Post #1415919
anthony.green
anthony.green
Posted Tuesday, February 05, 2013 9:06 AM
SSCertifiable
Group: General Forum Members
Last Login: Friday, April 12, 2013 3:51 AM
Points: 5,075,
Visits: 4,831
Well then as long as you have a linked server from ServerA to ServerB you will be ok.
But I seriously would recommend changing the connection string and not using dynamic SQL.
Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1
&
Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger
Post #1415925
Sean Lange
Sean Lange
Posted Tuesday, February 05, 2013 9:21 AM
SSCrazy Eights
Group: General Forum Members
Last Login: Today @ 1:15 PM
Points: 8,618,
Visits: 8,259
anthony.green (2/5/2013)
Well then as long as you have a linked server from ServerA to ServerB you will be ok.
But I seriously would recommend changing the connection string and not using dynamic SQL.
+1
_______________________________________________________________
Need help? Help us help you.
Read the article at
http://www.sqlservercentral.com/articles/Best+Practices/61537/
for best practices on asking questions.
Need to split a string? Try Jeff Moden's
splitter
.
Cross Tabs and Pivots, Part 1 – Converting Rows to Columns
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs
Post #1415942
Antony Symonds
Antony Symonds
Posted Tuesday, February 05, 2013 1:54 PM
SSC Rookie
Group: General Forum Members
Last Login: Friday, May 10, 2013 4:42 AM
Points: 38,
Visits: 93
Is dynamic SQL bad in general or just when it opens up this sort of a security hole allowing for the SQL to fully specified or at least the table?
Time to make a change
Post #1416084
Sean Lange
Sean Lange
Posted Tuesday, February 05, 2013 3:01 PM
SSCrazy Eights
Group: General Forum Members
Last Login: Today @ 1:15 PM
Points: 8,618,
Visits: 8,259
Antony Symonds (2/5/2013)
Is dynamic SQL bad in general or just when it opens up this sort of a security hole allowing for the SQL to fully specified or at least the table?
Dynamic sql is very powerful and is sometimes the best way to accomplish something. In the case of this it is more dangerous because of the possibility of sql injection.
_______________________________________________________________
Need help? Help us help you.
Read the article at
http://www.sqlservercentral.com/articles/Best+Practices/61537/
for best practices on asking questions.
Need to split a string? Try Jeff Moden's
splitter
.
Cross Tabs and Pivots, Part 1 – Converting Rows to Columns
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs
Post #1416119
Antony Symonds
Antony Symonds
Posted Wednesday, February 06, 2013 1:54 AM
SSC Rookie
Group: General Forum Members
Last Login: Friday, May 10, 2013 4:42 AM
Points: 38,
Visits: 93
Sean Lange (2/5/2013)
Antony Symonds (2/5/2013)
Is dynamic SQL bad in general or just when it opens up this sort of a security hole allowing for the SQL to fully specified or at least the table?
Dynamic sql is very powerful and is sometimes the best way to accomplish something. In the case of this it is more dangerous because of the possibility of sql injection.
Thanks, that is pretty much what I was thinking I just wanted to make sure... I suppose he could put some conditions to test the parameters being sent to make sure its within an acceptable bracket of sql code...
Time to make a change
Post #1416311
« Prev Topic
|
Next Topic »
17 posts, Page 2 of 2
««
1
2
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
