Calling an ASP page using xp_cmdShell

Question

Calling an ASP page using xp_cmdShell

Viewing 3 posts - 16 through 17 (of 17 total)

You must be logged in to reply to this topic. Login to reply

cliffb SSCarpal Tunnel Points: 4598 More actions · Answer 1

quote:
Sorry guys i thot this might be related...
the code below doesnt work for me...any ideas

declare @x varchar(20)
set @x = 'notepad'
exec xp_cmdshell @x
cheers!
Arvind

Check task manager. Look for notepad.exe. The application is not visible when using xp_cmdshell

asd SSC Veteran Points: 247 More actions · Answer 2

Hi cliffb, using XMLHTTP is the solution. Excellent work, thanks a lot. I've been warned about using xp_cmdshell to do this is there a more secure way of doing this?

cliffb SSCarpal Tunnel Points: 4598 More actions · Answer 3

quote:
I've been warned about using xp_cmdshell to do this is there a more secure way of doing this?

A workaround would to be "batch" the information you need together using a trigger to insert into a staging table. Then use a scheduled vbscript (using Scheduled Tasks) that reads the values in table. Loop through, and send to the web page.