Viewing 15 posts - 26,041 through 26,055 (of 59,102 total)
SrcName (8/30/2013)
Based on your experience,
i would be appreciate if you explain in detail how SQL Injection will pass this.
P.S.
maybe in this case it's no so important, this select statement...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 30, 2013 at 7:17 am
churi.hrushikesh (8/30/2013)
Declare all variable used in dynamic query as nvarchar or varchar. It will work for sure.
Better than that, don't use dynamic SQL because it doesn't look like it's even...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 30, 2013 at 7:04 am
rebecca 79612 (8/29/2013)
SET @sql = 'SELECT * FROM <sometable> WHERE dateadd(hh, ''' + @tzoffset + '''), END_DATETIME) BETWEEN ''' + @StartDate + ''' AND ''' + @EndDate + ''''
returns...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:41 pm
tom 28327 (8/28/2013)
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:32 pm
harsimranjeetsinghwasson (8/29/2013)
I would like to add data like time in a table in sqlserver when sqlserver machine is started or shutdown.
This information is recorded in the SQL Server logs and...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:28 pm
Guras (8/29/2013)
How can I create sps on multiple database?
This will sound like a silly question but I have to make absolutely sure, first... Will the stored procedure be...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:17 pm
I do it by script like Erland did except I go back to Multi-User immediately after the set to Single-User. Web servers won't be able to respond fast enough...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:13 pm
In that case, why not just return the value in the XML format that they want? It's pretty easy to do. In fact, the solution that Sean posted...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 10:07 pm
SrcName (8/29/2013)
make your query dynamic.
declare @sqlText varchar(max)
set @sqlText = 'SELECT
MC.MaterialItemContainerCode,
MC.ReceptionDate,
C.clientName ,
MI.materialItemName
FROM
MaterialsItemsContainers MC
INNER JOIN MaterialsItems MI WITH(NOLOCK)
ON (MC.materialItemIncId = MI.materialItemIncId AND MC.materialItemSqlId = MI.materialItemSqlId AND MI.isDeleted=0x0)
INNER JOIN Clients AS...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:46 pm
Junglee_George (8/28/2013)
What should this nvarchar(MAX) be changed to accommodate the comma seprated values?
How many comma separated values can you have?
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:45 pm
We use SAN replication over a dedicated line. I'm not sure how it works but the folks in NetOps have it absolutely screaming.
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:40 pm
Sigerson (8/29/2013)
Doing all of that within one SQL statement or a With block is beyond me,...
It's beyond me, too. But then again, I wouldn't even try to do it...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:34 pm
HanShi (8/29/2013)
Koen Verbeeck (8/29/2013)
And how can you improve a query? By updating statistics, minimize logging, creating indexes, compress the data, partition the table, ... 🙂 😉
You are absolutely right, but...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:26 pm
No. You could add a computed column for this. I recommend it be a persisted computed column to make it faster.
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:21 pm
I'd be interested in knowing the answer to this because I have a similar problem with a backup proc. I specifically programmed it to catch an error in a...
--Jeff Moden
Change is inevitable... Change for the better is not.
August 29, 2013 at 9:17 pm
Viewing 15 posts - 26,041 through 26,055 (of 59,102 total)