EDN Admin
Well-known member
Currently we are using dynamic SQL-strings to pull adhoc data from an Oracle database. Because of SQL-Injection "threats", I am trying to convert this code to dynamically create a temporary Oracle stored procedure with parameters, then execute it.
Question is, HOW???
I have seen tons of articles creating dynamic <span style="text-decoration:underline
SQL Server stored procedures, and tons for executing <span style="text-decoration:underline
existing Oracle stored procedures. But nothing for creating dynamic Oracle stored procedures. Anybody have an example?
Also, for Oracle Im using System.Data.OracleClient which, as I understand, has been deprecated. What should I be using?
Thanks very much.
View the full article
Question is, HOW???
I have seen tons of articles creating dynamic <span style="text-decoration:underline
SQL Server stored procedures, and tons for executing <span style="text-decoration:underline
existing Oracle stored procedures. But nothing for creating dynamic Oracle stored procedures. Anybody have an example?
Also, for Oracle Im using System.Data.OracleClient which, as I understand, has been deprecated. What should I be using?
Thanks very much.
View the full article
