GilaMonster (10/1/2011)

Let's say, while you're on vacation the junior developer has to make a change and he can't figure out how to get that sp_executesql working again, so he changes...

Lexa (10/1/2011)

---

GilaMonster (10/1/2011)

---

Lexa (10/1/2011)

---

codebyo, what exactly do you mean by it will do that for you? If a '; drop table --' command...

Or maybe I'm just making a big confusion or haven't understood clearly. Thank you for your advices. 😀

Best regards,

GilaMonster (10/1/2011)

---

Defend in depth. Check parameters and use parameterisation...

Lexa (10/1/2011)

---

codebyo, what exactly do you mean by it will do that for you? If a '; drop table --' command is passed,...

Plus you won't need any parameter checks for SQL injection at the beginning of your code when you use 'sp_executesql' properly as Gail advised.

'sp_executesql' will do that for you.

Best regards,

drew.allen (9/29/2011)

---

The problem with a UNION (ALL) is that you will have to scan the table twice. Here is an approach that only scans the table once.

SELECT [ID]

...

Good question.

And that's what I always wondered: is Microsoft dropping support for BIDS in favor of a new technology?

This happened with Report Builder which is now being dropped because of...

You beat me to it, ColdCoffee. 😀

Here's my code anyway:

SELECT t1.startdate, t1.enddate_goal, t2.date_goal

FROM (SELECT ROW_NUMBER() OVER (PARTITION BY account ORDER BY startdate) AS NId, startdate, enddate_goal, account

...

Does 'sp_detach_db' work?

Best regards,

For a variable size code, you can do something like this:

DECLARE @Size INT = 7;

SELECT

REPLICATE('0', @Size-LEN(CAST(1234 AS VARCHAR(MAX)))) + CAST(1234 AS VARCHAR(MAX)) +

REPLICATE('0', @Size-LEN(CAST(76541 AS VARCHAR(MAX))))...

:laugh:

Agree. Easy and straightforward question that shows an important limitation...

If all goes wrong we can always hide inside a mall and wait...

Hmm. What do you mean? September 1st is Thursday, not the first day of the week.

Day of week would be like this:

SELECT CASE DATEPART(WEEKDAY, '20110901')

...

Hmm... no offense...