Re: Check Sql Before Execute

anonymous_at_discussions.microsoft.com
Date: 12/23/03 

Date: Tue, 23 Dec 2003 10:48:23 -0800

hi,
I want to concate string to the Sql before execute, to
force aApplication Sequrity & to remove Sql that are not
supposed to Run . (like RLS ability in Oracle)

>-----Original Message-----
>"Eran A" <eran_@walla.co.il> wrote in message
>news:095001c3c96a$1c7ff4d0$a401280a@phx.gbl...
>> I like to know if there are way's to Get aSql sentences
>> there are sent to the SqlServer2000 and to check them
>> before Execute, and could to Change them (like add them
>> more parts to the WHERE ).
>
>You could use SQL Profiler to capture the SQL as it is
being sent for
>processing, and modify it. To my knowledge there is no
way to capture SQL
>"real time" (outside of a stored procedure execution
stream), modify it,
>then send it on it's way before it executes.
>
>What is it you need to do?
>
>Steve
>
>
>.
>

Relevant Pages

  • Re: Opinions on approach, please...
    ... Create a data layer program per table, ... number of bind variable tokens in your dynamic SQL. ... then simply EXECUTE that without passing it any parameters? ... Hard code WHERE clauses. ...
    (comp.lang.cobol)
  • Re: SQL Injection- Bypassing magic_quotes
    ... Because i was trying to execute: ... Don't terminate the query and you most ... Or try something like bobcat or one of the other SQL injection tools out ... Chief Information Security Officer ...
    (Pen-Test)
  • Re: Opinions on approach, please...
    ... Create a data layer program per table, ... number of bind variable tokens in your dynamic SQL. ... then simply EXECUTE that without passing it any parameters? ... explicitly code dummy words as bind variable placekeepers, put the host variables on the ...
    (comp.lang.cobol)
  • Re: UPDATE query in Access 2003 raising error
    ... string into a variable strSQL but create the qrydef from a string strSQLx (I ... Runtime error 3066 Query must have at least one destination field. ... The SQL works fine if I use it in the QBF Design mode. ... Elsewhere in the code I use the same technique to execute an SQL ...
    (microsoft.public.access.formscoding)
  • Re: Poor performance when executing stored procedure
    ... > Generally I would write stored procedures to do only one job. ... If SQL Server ... > which is even worse those sps can execute each other. ... > then executed spOrders which is executed in spCustomers and then got stuck ...
    (microsoft.public.sqlserver.programming)