The only problem with that is that I can have 4 processes doing exactly the same thing for different customers.

The global temp table will be hijacked by another process i.e....

I think it was due to the simple fact that

OBJECT_ID('#table') doesn't find the #table.

I just found that I can use OBJECT_ID('tempdb.dbo.#table') and that I can safely drop the table...

oh yes... you're right...

I removed unnecessary complications from the code the 2 first queries insert into unique temporary tables.

for which the unique number is generated by NEWID().

To avoid processes...

You're right. I have to find a way to validate every parameter thoroughly before letting it pass.

I will have to do different functions depending on the type of...

understood. But whitelisting is practically impossible as I would have to list all the table names and columns possible and disregarding the fact that there can be unique temporary...

Check the -Q and -b special behavior when together...

If -b is specified together with this option (-Q), sqlcmd exits on error. -b is described later in this topic.

Hey Jeff,

The parameters are tablenames and columns. Right now, a Delphi software (procedure) has the same parameters and does it all withing the program. They want to...

As Hex? hmmm. So How would I protect against that in a Function that parses and whitelists the parameters?

Thanks Scott... Didn't think of that one...

I like it...

😉

I personally like the Normalized way (no redundant data)

Have everything organized in separate tables... As for queries, If you have the right structure and indexes, it shouldn't be a problem......

what is the field definition of the audit table set as?

Thanks for you input.

I tend to agree with you regarding these 2 maintenance operations but these are existing scheduled operations that we offer in our software. Are they really needed?...

Hi Jeff,

The person that is always logged is the operator (a windows user which is already logged in), part of the Operators (windows group).

We don't have their login or password......

I was able to get it work...

All that was missing was:

ALTER Database MYDB Set TrustWorthy ON;

By setting it on, the Operator group is now able to Run the...

Fair Enough...

I thought there would maybe be a command like in MySQL's "Flush-privileges" to refresh the changes done to a user.

Thank you for your response.