Not sure about the rest of it, but the CAST(Varbinary as Varchar) Injection trick has been around for at least 3 months. There are several instances reported here from...

On the other hand you are right about how to finesse the Fencepost error out of the string concatenation. I couldn't remember how to do it, which is why...

Actually, your examples are out-of-spec Peso and make two additional assumptions: First you assume that zero-length strings are permitted in the first place....

Glad I could help.

I think that SD is looking for something less than that, John.

Try this:

Select 'Set No '+SetNo+ ': '

+ CASE When Reasons='' Then ''

When Left(Reasons,1) = ',' Then Substring(Reasons,2,Len(Reasons))

Else Reasons

End as...

Agreed.

natalia.rodchenko (8/13/2008)

---

problem with stored procedure is that I can't call it in a loop (call with a variable)

As I understood, I must call stored procedure with exact string, like 'AUSTRALIA',...

The ways that I know of to do this:

1. Disabled WHERE clauses: This is what you currently have and you and antonio were discussing. Problems: parameter-sniffing and...

Looks like it should work. What problem are you having?

OK, this is almost certainly something in your app and/or on the client-side and not in SQL Server itself. Can you show us your connection string and ADO.net connection...

The problem is that it is not clear what timeout timer is coming into play here. You already said that you had set all of the timeouts to 0...

Glad I could help.

Tinfoil does block the mind control transmissions better but just doesn't inspire the same...

Attempt #1 seems right to me. What is "not right" about it and how do you know that it is wrong?

Ken Simmons (8/12/2008)

---

Here is an example of a cursor outperfoming a set based solution. I am not saying it can be done often, but I never say something can't...