October 20, 2010 at 2:15 am
I have a report where I want my users to insert their choice of account No on my parameter called account #. Using a muilt-value with drop-down is a good as we have a big list of account numbers. So the better way will be to give them an option to insert their own choice of account N0s. Can I get some help of how to do it.
Below is my clause for the parameter
Where A.acct_no in (@acct_no)
October 20, 2010 at 7:15 am
Pitso,
You should be able to do it just fine using Parameters in SSRS, unless something changed in 2008 that I don't know about. I believe you make the value as Non-queried and they should be able to type in the value as they want.
The issue, though, is SQL Injection attacks. Google that phrase to understand just how major a problem this can be.
I don't know if SSRS can do this, but the best solution (if it can) is to design the parameter so it does a LIKE search as they start typing in numbers. The instant someone types 1, it pulls all the accounts beginning with 1, then when they add 2, the list narrows down to the 12... numbers, when they type 3, the list narrows down even further to 123... etc. That way, they can type in the number, but the parameter is filled in by the list and if the number they type doesn't exist, they can't enter in any injection attacks.
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply