Viewing 15 posts - 31 through 45 (of 149 total)
The simplest way is to record a credit as a negative "payment" amount. If your need for credits is fairly simple, that's a good way to go. It's...
June 2, 2006 at 6:21 am
Did you actually change anything in the structure from the last time you posted this?
Repeated ideas from last time:
Remove customerName, and put it in the Customer table.
Move creditCardName to the...
June 2, 2006 at 6:13 am
Grr. That's a result of combining my methods and brij's.
Remove the SET @VDNList = '' statement from your function. That should mean that the variable is initialized as...
June 1, 2006 at 8:13 am
Put your concatenation process in a UDF, passing whatever value you're grouping on. So, in your case, it might look like:
CREATE FUNCTION ConcatVDN (@type varchar(30), @center varchar(50))
RETURNS varchar(4000)
AS
DECLARE @VDNLIST...
June 1, 2006 at 5:41 am
Huh. I didn't think it would actually evaluate that. Well, there's proof that stripping semicolons is not sufficient protection.
May 31, 2006 at 3:11 pm
In your procedure, you would put something like:
IF CHARINDEX(';',@formula) 0 THEN
BEGIN
-- raise error indicating possible injection
END
ELSE
BEGIN
-- put your EXEC statement here
END
Since a semicolon is not a character...
May 31, 2006 at 7:22 am
You are giving anonymous users read and write access to a folder on your website. Which means that they can see whatever files you put up there. And...
May 31, 2006 at 7:02 am
Yup, that pretty much ought to work.
As a critical note, this method opens you up to a problem known as SQL injection. That's when a hacker is able to...
May 31, 2006 at 6:27 am
The biggest thing to hit them with is that you already own the SQL Server. That's like insisting on leaving your pickup in the garage while you try to...
May 31, 2006 at 6:08 am
Security is a major concern. Security in Access is essentially non-existent. There is no way to secure Access against a dedicated, knowledgeable hacker. It's pretty difficult to...
May 31, 2006 at 5:48 am
Try EXEC. Except that you have to put SELECT in front of the expression. For example:
EXEC('SELECT 10 + 20')
Will yield 30.
Note that this method gives poor performance if...
May 30, 2006 at 8:58 am
If redesign is an option, I would strongly recommend it. This sort of information should be drawn from an Orders table with a GROUP BY query, not stored in...
May 30, 2006 at 7:43 am
I strongly recommend that you create this with the cross-tab functionality built into Crystal Reports. It is simpler, more powerful, and more intuitive.
May 30, 2006 at 7:37 am
Just in case your boss needs more than one opinion, I'm going to agree with Mike. This seems like, honestly, the worst possible solution. Why can't the webmonkeys...
May 30, 2006 at 7:35 am
Identity values are meaningless. They serve solely to produce an artificial primary key. They should not have any relation to real-world values, unless you don't mind having, say,...
May 30, 2006 at 7:23 am
Viewing 15 posts - 31 through 45 (of 149 total)