Database

select ids.id,
(select top 1 column1 from mytesttable t2 where t2.id = IDs.id order by column1) as column1,
(select top 1 column2 from mytesttable t2 where t2.id = IDs.id order by column1) as column2,
(select top 1 column3 from mytesttable t2 where t2.id = IDs.id order by column1) as column3,
(select top 1 column1 from mytesttable t2 where t2.id = IDs.id order by column1 desc) as column4,
(select top 1 column2 from mytesttable t2 where t2.id = IDs.id order by column1 desc) as column5,
(select top 1 column3 from mytesttable t2 where t2.id = IDs.id order by column1 desc) as column6
from (select distinct id from mytesttable) as IDs

Richard A. Abbott wrote:

Also have a read of ...

http://www.securitypronews.com/news/securitynews/spn-45-20061019MaliciousCodeInjectionNotJustforSQLAnymore.html#resume[^]

GentooBoxX wrote:

is sql parameters really 100% secure, and how does it work?

GentooBoxX wrote:

I have never been able to execute an SQL injection attack on any on my applications that uses SQL parameters, but there is always someone better knowing out there

Keith Andersch wrote:

I can think of putting a couple of fields, last_modified_by and date_of_mod, into each table which see the need for tracking, but that seems clunky. It would work well enough for this project as only a few people will be using it and it's not very big but when I start getting into the bigger stuff, I'm sure that will break down

Scott Serl wrote:

On projects that require closer auditing, I use triggers to log changes to another database. That way, even admins changes through queries are logged.

vasini wrote:

As far as I know, oled for Oracle database. But my question here is, how can I conncect to SQLServer database without using sqlclient.