PhilM99 (5/4/2009)

---

Sorry if I have offended the volunteers...

Very nice article. Easy to read and very instructive. Thanks.

Please see this article [/url]by some really smart guy who hangs out here.

You will probably want to lookup INNER JOIN for this problem that looks an awful lot like homework .

Again, it's still not established that there is any SQL Injection attack possibility here. If the EXECUTE is not being given an enhanced security context (or relying on an...

QUOTENAME is probably safe (Microsoft recommends it but AFAIK has never affirmed that it is 100% safe), but "

PRINT ('select * from [' + @dbname + '].dbo.sysfiles')

Definitely is not. ...

Actually, there's not necessarily any danger of an Injection exploit yet. It all depends where @dbname cam from and whose authority is being used to execute the EXECUTE command.

Like this:

Declare @sql NVarchar(MAX);

Set @sql = '';

SELECT @sql = @sql + '

EXEC [dbo].[uspOrderDetail_Insert] '+@OrderID+','+utbCart.ProductID

+','''+utbCart.ReferenceName+''','+utbCart.Quantity

+','+utbCart.UnitCost+','+utbCart.ExtendedCost+''''

FROM utbCart WHERE

utbCart.CartID = @CartID

OR

utbCart.ShopperID = @ShopperID

Print...

First, my heartfelt thanks to Lynn, Jeff, Jack, Bruce and everyone else who pitched in to cover for me while I was in the hospital for the last week. ...

Jeff Moden (5/3/2009)

---

Thanks for the offers of help guys. I love this team.

I've got 2k Dev, 2k5 Dev, and I'll soon have 2k8 Dev. I may also be...

I admit that I was a little confused at first also. But then I thought "well, Lynn wouldn't do (b) without also doing (c), so I guess I can...

Paul White (5/3/2009)

---

RBarryYoung (5/3/2009)

---

Thus if we take a filegroup to another database and try to attach/restore it into that database, the filegroup's object header/definitions won't match the primary's part of...

Lynn Pettis (4/27/2009)

---

ALZDBA (4/27/2009)

---

As you suggested the "Order by" testing with Jeffs solution, I also tested your marvellous solution for partitioned objects.

First findings .... It no longer works .... SQL2008...

Thanks, Roy.

Jeff: I also have SQL Server 2008 Developer Edition on my laptop if you need it.