Search Results

Search found 31931 results on 1278 pages for 'sql statement'.

Page 269/1278 | < Previous Page | 265 266 267 268 269 270 271 272 273 274 275 276  | Next Page >

• Does this PHP function protect against SQL injection?

  - by George Edison

  I have this function I'm using and I want to be sure that it fully protects against SQL injection attacks: function MakeSafeForQuery($string) { // replace all of the quote // chars by their escape sequence $ret = str_replace("\\","\\\\",$string); $ret = str_replace("'","\\'",$ret); $ret = str_replace("\"","\\\"",$ret); return $ret; } Am I missing anything serious?

  Read the article

• SQL Server and Table-Valued User-Defined Function optimizations

  - by John Leidegren

  If I have an UDF that returns a table, with thousands of rows, but I just want a particular row from that rowset, will SQL Server be able to handle this effciently? SELECT * FROM dbo.MyTableUDF() WHERE ID = 1 To what extent is the query optimizer capable of reasoning about this type of query? How are Table-Valued UDFs different from traidtional views if they take no parameters? Any gotchas I should know about?

  Read the article

• Linq to Sql get SqlCommand when stored procedure execution fails

  - by Tim Mahy

  Hi all, currently I'm assigning a TextWriter to the Log property of my Linq to Sql data context (per request instancing) and write this to my logging when an exception is thrown while executing a stored procedure (is strongly typed mapped in the context, so not executing a custom command) however when using ADO.NET we normally inspect the SqlCommand upon unhandled exception to read out the parameters and log them is it possible to access the SqlCommand that was used for executing a Stored Procedure in L2S so we can reuse that existing logging component? This would be far nicer than the current Log TextWriter solution.... greetings, Tim

  Read the article

• Use '=' or LIKE to compare strings in SQL?

  - by furtelwart

  Hi! There's the (almost religious) discussion, if you should use LIKE or '=' to compare strings in SQL statements. Are there reasons to use LIKE? Are there reasons to use '='? Performance? Readability? Thanks in advance!

  Read the article

• Full text search on multiple fields in different tables

  - by crisgomez

  Hi, I want to create a a full text search usng ms sql 2005. here is the structure of my table User-contains fields of Id, fname,lname,email,alternativeemail Attachment-contains fields of id, name,category,filenameorurl Certification-contains of fileds of id, title,school,sdate,edate EducationalBackground-contain of fields of, id,qualification,sdate,edate,school,fieldofstudy EmploymentDetails-contain of fields position, positionlevelid,specializationid,description now the relationship of user to the other table is one to many relationship. now how can I create an effective query to have quick full text search and return the values of the different tables?any help please

  Read the article

• MS Access 97 application working directly with MS SQL Server 2005

  - by hgulyan

  Please, give me the most serious arguments against this. Application directly opens a connection to ms sql server, directly executes queries. So what I'd like to ask: 1) Why it is wrong? 2) What serious problems can that cause? 3) What should I do?:)

  Read the article

• Rewrite SQL Fulltext Function to return Table only

  - by Alex

  I have a MS SQL Fulltext Function like this: (...) RETURNS TABLE AS RETURN SELECT * FROM fishes INNER JOIN CONTAINSTABLE(fishes, *, @keywords, @limit) AS KEY_TBL ON fishes.id = KEY_TBL.[KEY] When I use this function in LINQ, it generates a special return type which includes all fields of my "fishes" table, plus Key and Rank. How could I rewrite above query, or change something in LINQ, to omit Key and Rank and just return my "fishes" results (and to have the fulltext search result objects be of type Fish, which is what I really care about, so I don't have to cast)?

  Read the article

• Keyword search on all columns of multiple tables in sql server

  - by hiralshah

  Dear all, We are maintaining the profile information’s (like profile first name, last name, address, city, state, age, religion, occupation, education, etc….) from tbl_profie table in sql server. The users can search profiles using any keywords like Example 1: MBBS, Delhi, India Example 2: MBA, Delhi, cricket Example 3 : London, Hindu Tbl_profile table defending some parent table like Tbl_city, Tbl_state, Tbl_country, Tbl_occupation, Tbl_education tables, etc. So how to fetch user search results from Tbl_profile and profiles related tables using user’s keyword with easiest way.

  Read the article

• SQL reporting services reference

  - by SonOfOmer

  Hi everyone, I want to add service reference to SQL reporting services on local machine. In Reporting Service Configuration Manager under Web Service URL tab I have report service URL exposed, I have tried to add web reference to project with that Web Reference URL, but it can not be found. Please tell me am I missing something or is this right way to to? Thanks a lot.

  Read the article

• How to show hierarchial data in a dropdownlist.

  - by vaibhav

  I have a table in sqlserver 2005. I want to show all domain name in a dropdownlist maintaing the same hierarchy. i.e Law Engineering --civil --Mechanical Medical --Dental ----Cavity --MBBS I need to append '--' according to the domain level. Is it possible using a sql query. or alternatively can I have any other control to show this data.

  Read the article

• Exporting SQL Server Databases for offline use

  - by WedTM

  I have a desktop application (C# .NET 3.5) that uses a SQL server for it's database. I have had a request from the client, however, to make it possible to export the database as it stands, and be able to use it on a laptop without connectivity. They understand that updates to the parent server will not be reflected in these offline clients. Is there a way I can just save the DataSet's to a binary form and write them to a disk and send those files to the offline clients.

  Read the article

• ms sql server identity counterpart problem

  - by Guru

  hi there, I'm using MS Sql Server and I want to use identity constraint in it I know how to use it in following manner create table mytable ( c1 int primary key identity(1,1); ) the above code works fine but what if i want the identity column to have values as EMP001, EMP002,... instead of 1,2.... Thanks in advance, Guru

  Read the article

• Generate table relationship diagram from existing schema (SQL Server)

  - by Nick

  Is there a tool around that would produce a diagram showing existing tables and their relationships given a connection to a database or by any other means? This is for SQL Server 2008 Express Edition.

  Read the article

• Subsonic 2.2 and SQL CE

  - by Giuseppe

  Hi, anybody use Subsonic with SQL Server CE 3.5 ? I try but get an error with Substage 2.2, error talking about PK_TABLE. My tables have primary keys and relations. Can someone help me ? By, Giuseppe.

  Read the article

• Does SQL Server CE 3.5 SP1 install everything?

  - by Vaccano

  I am trying to set up a device remotely. I found this link: http://www.microsoft.com/downloads/details.aspx?familyid=FCE9ABBF-F807-45D6-A457-AB5615001C8F&displaylang=en That has SQL Server CE 3.5 SP1. I read the whole page, and can't seem to find out for sure if SP1 is a full install or if it needs SQLServer CE 3.5 first. Does anyone know?

  Read the article

• SQl function in android

  - by rui.pereira

  Cursor cursor = db.rawQuery("SELECT COUNT(rat) FROM "+ TABLE_NAME_EXTRA +" apkid=\""+apkid, null); cursor.moveToFirst(); int somatotal = cursor.getInt(0); I'm trying to do a SQL function like count and sum, but this code returns a exception saying "emptyvalues". anyone know why?

  Read the article

• change string in mssql to abbreviate

  - by jeff

  How do I return the everything in a string from a sql query before a certain character? My data looks like this: HD TV HM45VM - HDTV widescreen television set with 45" lcd I want to limit or truncate the string to include everything before the dash. So the final result would be "HD TV HM45VM"

  Read the article

• MS SQL and Indentity column

  - by andrew007

  Hi, I just noticed that if I have an identity column in a table, when I insert new rows MS SQL 2008 is automatically filling up the sequence if there are discontinuity. I mean, if in my identity column I have 1,2,5,6 if I insert other two rows in the table the system puts automatically 3,7 in the identity column. Do you know how to control this behavior? THANKS

  Read the article

• Basic SQL Select in Postgresql fails

  - by Rhubarb

  I am doing a select * on a postgresql table, and everything looks good. But if I do: SELECT Name from People It says: ERROR: column People.Name does not exist SQL state: 42703 Character: 8 But the name column shows up during select *. I've tried: SELECT People.Name from People as well, with the same result. Am I missing something? It should be pretty easy to do this in any other database.

  Read the article

• What are naming conventions for SQL Server ?

  - by newbie

  I need to create database for SQL Server, what kind of naming convention I sohuld use? 1) Table names could be : customer, Customer, CUSTOMER 2) Field names could be : customer_id, CustomerId, CustomerID, CUSTOMER_ID, customerid, CUSTOMERID and so on... Is there any official suggestion for naming conventions or what is msot common way to name tables and fields?

  Read the article

• How to make a trasanction cover several stored procedure ?

  - by Bitnius

  I need to include several stored procedure in a single transaction in a single database, if any of stored procedure fail then roll back transaction of all stored procedure procesed in the scope. I work with SQL-SERVER 2008

  Read the article

• Upload a file to sql database with delphi and after download

  - by Rapunzo

  I am working to make a basic file database, but I couldn't find the true codes. Can anyone help me to save an exe file to sql database after read, download and use when I need it? With Delphi

  Read the article

• SQL query through an intermediate table

  - by Bryan

  Given the following tables: Recipes | id | name | 1 | 'chocolate cream pie' | 2 | 'banana cream pie' | 3 | 'chocolate banana surprise' Ingredients | id | name | 1 | 'banana' | 2 | 'cream' | 3 | 'chocolate' RecipeIngredients | recipe_id | ingredient_id | 1 | 2 | 1 | 3 | 2 | 1 | 2 | 2 | 3 | 1 | 3 | 3 How do I construct a SQL query to find recipes where ingredients.name = 'chocolate' and ingredients.name = 'cream'?

  Read the article

• Sql Server string to date conversion

  - by JosephStyons

  I want to convert a string like this: '10/15/2008 10:06:32 PM' into the equivalent DATETIME value in Sql Server. In Oracle, I would say this: TO_DATE('10/15/2008 10:06:32 PM','MM/DD/YYYY HH:MI:SS AM') This question implies that I must parse the string into one of the standard formats, and then convert using one of those codes. That seems ludicrous for such a mundane operation. Is there an easier way?

  Read the article

• XKCD SQL injection - please explain

  - by Blankman

  Just looking at: What does this SQL do: Robert'); DROP TABLE STUDENTS; -- I know both ' and -- are for comments, but doesn't the word DROP get commented as well since it is part of the same line?

  Read the article

< Previous Page | 265 266 267 268 269 270 271 272 273 274 275 276  | Next Page >