Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- From: Erland Sommarskog <esquel@xxxxxxxxxxxxx>
- Date: Tue, 23 Jun 2009 17:47:04 -0500
Hugo Kornelis (hugo@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx) writes:
* Dynamically generated ad-hoc SQL: Never. Just google "SQL injection".
Hm, properly written dynamic SQL with two-part notation and parameterised
statements are not completely evil. Depending on the architecture of your
application, they can certainly be an alternative.
Did I miss an alternative to stored procedures?
I hate to say it, but there is LINQ.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- Follow-Ups:
- Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- From: Hugo Kornelis
- Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- References:
- Wanted: Discussion on MSSQL Internals Interview Qustions
- From: Siegfried Heintze
- Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- From: Hugo Kornelis
- Wanted: Discussion on MSSQL Internals Interview Qustions
- Prev by Date: Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- Next by Date: Re: trailing blanks in where
- Previous by thread: Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- Next by thread: Re: Wanted: Discussion on MSSQL Internals Interview Qustions
- Index(es):
Relevant Pages
|