Click here to Skip to main content
15,899,026 members
Home / Discussions / Database
   

Database

 
GeneralRe: SQL Select Where query Pin
Joe Stansfield15-Oct-12 10:48
Joe Stansfield15-Oct-12 10:48 
GeneralRe: SQL Select Where query Pin
fjdiewornncalwe15-Oct-12 11:06
professionalfjdiewornncalwe15-Oct-12 11:06 
GeneralRe: SQL Select Where query Pin
Joe Stansfield16-Oct-12 0:08
Joe Stansfield16-Oct-12 0:08 
GeneralRe: SQL Select Where query Pin
Eddy Vluggen16-Oct-12 0:12
professionalEddy Vluggen16-Oct-12 0:12 
GeneralRe: SQL Select Where query Pin
Joe Stansfield16-Oct-12 23:04
Joe Stansfield16-Oct-12 23:04 
GeneralRe: SQL Select Where query Pin
Eddy Vluggen16-Oct-12 23:37
professionalEddy Vluggen16-Oct-12 23:37 
GeneralRe: SQL Select Where query Pin
Member 952116716-Oct-12 22:41
Member 952116716-Oct-12 22:41 
GeneralRe: SQL Select Where query Pin
Simon_Whale16-Oct-12 22:52
Simon_Whale16-Oct-12 22:52 
GeneralRe: SQL Select Where query Pin
Rohit Shrivastava18-Oct-12 7:56
Rohit Shrivastava18-Oct-12 7:56 
GeneralRe: SQL Select Where query Pin
Joe Stansfield15-Oct-12 1:20
Joe Stansfield15-Oct-12 1:20 
GeneralRe: SQL Select Where query Pin
Eddy Vluggen15-Oct-12 1:25
professionalEddy Vluggen15-Oct-12 1:25 
AnswerRe: SQL Select Where query Pin
Nidhisha Biju15-Oct-12 1:05
Nidhisha Biju15-Oct-12 1:05 
GeneralRe: SQL Select Where query Pin
Eddy Vluggen15-Oct-12 1:26
professionalEddy Vluggen15-Oct-12 1:26 
AnswerRe: SQL Select Where query Pin
Aadhar Joshi16-Oct-12 20:47
Aadhar Joshi16-Oct-12 20:47 
AnswerRe: SQL Select Where query Pin
Hitesh R23-Oct-12 1:06
Hitesh R23-Oct-12 1:06 
QuestionMS SQL didn't allow to store apostrophe( ' ) in name Pin
Azher.Cybertech15-Oct-12 0:04
Azher.Cybertech15-Oct-12 0:04 
AnswerRe: MS SQL didn't allow to store apostrophe( ' ) in name Pin
Eddy Vluggen15-Oct-12 0:55
professionalEddy Vluggen15-Oct-12 0:55 
AnswerRe: MS SQL didn't allow to store apostrophe( ' ) in name Pin
Hitesh R23-Oct-12 1:08
Hitesh R23-Oct-12 1:08 
GeneralRe: MS SQL didn't allow to store apostrophe( ' ) in name Pin
Azher.Cybertech27-Oct-12 23:34
Azher.Cybertech27-Oct-12 23:34 
QuestionError Running SP [SOLVED] Pin
jojoba201113-Oct-12 21:53
jojoba201113-Oct-12 21:53 
AnswerRe: Error Running SP Pin
Eddy Vluggen14-Oct-12 3:06
professionalEddy Vluggen14-Oct-12 3:06 
AnswerRe: Error Running SP Pin
Richard Deeming15-Oct-12 3:38
mveRichard Deeming15-Oct-12 3:38 
Building a dynamic query in SQL, even inside a stored procedure, will not prevent SQL injection[^].

Your example could easily be rewritten as a simple UPDATE statement. (NB: Constant values like 100 are never null!) If any of the new values are passed in as parameters, then your query is open to SQL injection.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer


QuestionRe: Error Running SP Pin
jojoba201115-Oct-12 4:52
jojoba201115-Oct-12 4:52 
NewsRe: Error Running SP [Solved] Pin
jojoba20115-Nov-12 22:37
jojoba20115-Nov-12 22:37 
QuestionBug in SQLBulkCopy? Truncates decimal digits after 26 records Pin
Allan Watkins12-Oct-12 14:25
Allan Watkins12-Oct-12 14:25 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.