Hi,

thanks for the hint with dynamic SQL (I didn't know that it is faster and better than the query I wrote and always thought that it is nasty (SQL...

Thanks Phil!

Hi,

so you need a further column in which the file type is stored:

filetype content: .doc, .xml,....

create table tblRessources

(

IDRessource int identity(1,1) primary key,

FKUser int not null references tblUser,

Url varchar(500),

ID UNIQUEIDENTIFIER...

Exactly! But thanks to all of you!! Great help!:kiss:

Great!! This works out! So if I cannot find out how CTE will work, I can do it with this solution!

Thanks to all!! 😀

But this doesn't solve the problem with the like operator as I cannot implement the wildcard %, or?

Thanks Sean! But I cannot see how dynamic SQL will help here? The problem is that all fields have to be checked for the search criteria so I cannot put...

Thanks Luis! I have to practice and read carefully as CTE is rather confusing for me ;)... but you think this will solve the problem?

Performance is not the point...

that are exactly the things which are going around my head ;))

but as u think that both design are practicable - that helps. then i tend to implement the version...

thank you. it seems that i didn't mention clearly what i mean.

there is a tabel with addresses. for each address i can refer to a title, a contact, martialstatus, ......

thanks Gail. I see what you mean and will do it your way from now on. 🙂

sql injection: but first of all he has to know the name of the...

hi jeff,

what do you think: if you have serveral parameters in the where clause, which can be choosen in every possible way (e.g. the interface allows you to pick: state,...

thanks for your hint, Jeff.

but isn't this better than to give users permissions on tables and generate the whole select statement dynamically as mentioned before?

hi Jack,

thanks for your articel.

but I still have a question (hopefully it is ok to post questions/problems here, if not: sorry folks, i'm quite new here):

I get a csv...