Re: Check Sql Before Execute

From: Steve Thompson (SteveThompson_at_nomail.please)
Date: 12/23/03 

Date: Tue, 23 Dec 2003 10:43:14 -0500

"Eran A" <eran_@walla.co.il> wrote in message
news:095001c3c96a$1c7ff4d0$a401280a@phx.gbl...
> I like to know if there are way's to Get aSql sentences
> there are sent to the SqlServer2000 and to check them
> before Execute, and could to Change them (like add them
> more parts to the WHERE ).

You could use SQL Profiler to capture the SQL as it is being sent for
processing, and modify it. To my knowledge there is no way to capture SQL
"real time" (outside of a stored procedure execution stream), modify it,
then send it on it's way before it executes.

What is it you need to do?

Steve

Relevant Pages

  • Re: DTS Global Variables in Execute SQL tasks.
    ... you can use an ActiveX script to modify the Execute ... > SQL Task's SQLStatement property. ...
    (microsoft.public.sqlserver.dts)
  • Re: Check Sql Before Execute
    ... I want to concate string to the Sql before execute, ... >processing, and modify it. ... way to capture SQL ...
    (microsoft.public.sqlserver.security)
  • Re: Opinions on approach, please...
    ... Create a data layer program per table, ... number of bind variable tokens in your dynamic SQL. ... then simply EXECUTE that without passing it any parameters? ... Hard code WHERE clauses. ...
    (comp.lang.cobol)
  • Re: SQL Injection- Bypassing magic_quotes
    ... Because i was trying to execute: ... Don't terminate the query and you most ... Or try something like bobcat or one of the other SQL injection tools out ... Chief Information Security Officer ...
    (Pen-Test)
  • Re: Opinions on approach, please...
    ... Create a data layer program per table, ... number of bind variable tokens in your dynamic SQL. ... then simply EXECUTE that without passing it any parameters? ... explicitly code dummy words as bind variable placekeepers, put the host variables on the ...
    (comp.lang.cobol)