Debra Hodges-389283 | SQLServerCentral

Debra Hodges-389283

Forum Replies Created

Viewing 8 posts - 1 through 8 (of 8 total)

RE: Updated SQL Injection

Wonderful article! Thank you so much!

December 15, 2006 at 7:40 am

#678336
RE: Column name passed in as a parameter

Ninja, thank you again for sending those article links. I did get about halfway through the first one last night. I should have read it before posting all this, is...

December 13, 2006 at 8:05 am

#677778
RE: Column name passed in as a parameter

Ok, it works perfectly now. Thank you all so much. I started to read the first article but didn't get far enough, will finish it tonight. Thanks again, appreciate it.

December 12, 2006 at 4:02 pm

#677662
RE: Column name passed in as a parameter

declare
@weight varchar(20)
set
@weight = 5
declare
@sql

December 12, 2006 at 3:37 pm

#677654

RE: Column name passed in as a parameter

sorry, let me correct that.

select

top 1 @Weight from shippingrates WITH (NOLOCK)...

December 12, 2006 at 11:42 am

RE: Column name passed in as a parameter

Not sure what you mean. Each column can be selected. This query works just fine in retrieving the value.

select top 1 [5] from shippingrates with (NOLOCK)

returns 8.35

this doesn't work: @Weight =...

December 12, 2006 at 11:36 am

RE: Column name passed in as a parameter

I'd like to change the column names but didn't design this database, so can't do that, unfortunately. Thanks.

December 12, 2006 at 11:23 am

RE: Column name passed in as a parameter

set ANSI_NULLS ON

set QUOTED_IDENTIFIER ON

GO

ALTER PROCEDURE [dbo].[Shipping_GetShippingRate]

@Weight char(50),

@theShipMethod char(30),

@CountryCode char(3),

@DestinationZone int

AS

SET NOCOUNT ON

SELECT [ + @Weight...

December 12, 2006 at 11:15 am

Viewing 8 posts - 1 through 8 (of 8 total)