The following is what I meant. As John pointed out, the error message is printed to the client, but odds are your client doesn't care and will not acknoledge that they...

Not much. I've posted this function before but its what we use for this situation. The performance benefit is that it eliminates one CHARINDEX call per loop. Of course, if you...

I'm assuming he knows how to pose the query using osql, but doesn't know how to get the result of the query into an environment variable for use in an...

As a side note, you can avoid the vast majority of such attacks by replacing ' with '' (two single quotes) within any data fields just prior to concatenating it...

I think you could use the "Use query governor to prevent queries exceeding specified cost" server setting to indirectly limit it. I'm not very familiar with it and so can't...

Yes. Suffice it to say that you can imbed SQL to cause issues if the fields are not sufficiently edited and you either know how the SQL is structured (an...

I've provided a function that uses a Split function we use. It works with the example provided but may not ultimately be what you need. You will have to determine...

You could use a nested batch (dynamic SQL or a Stored Procedure) within your T-SQL batch to test the server. Assess the @@ERROR_CODE and return its value within an Output...

Yes, but its probably ugly. Create a function to do whatever string analysis you crave for determining your percentage and then call that function passing the string column as a...

To be honest I didn't know you could either. I started my post for the temp table/exec thing but first decided to prove that a case didn't work in the ORDER...

declare @DateRanges table ( BeginDt datetime, EndDt datetime )

INSERT INTO @DateRanges

      SELECT Begin_Date, End_Date FROM MyTable

SELECT A.* FROM MyTable A

      WHERE 1 < ( SELECT COUNT(*) FROM @DateRanges B

                              B.BeginDt...

Two things. One, you don't want to cast both columns because it will force a full index scan on both tables since you are manipulating the indexed value (SQL Server...

There are two other possibilities for handling the order by. I've also included yet another option for dealing with the WHERE clause change, not that there is anything wrong with...

I think the following may be what you are after via EM. Someone has probably created a complex T-SQL to do this as well and with greater control, but I think...

Transactions can span batches (a dynamic SQL submission or up to a GO). Apparently OLEDB did some integrity checking and assumed you didn't want to leave a transaction open after...