Database

Ron Savage wrote:

If the entire query as written is part of his internal code, there is no danger.

Colin Angus Mackay wrote:

There is the possibility of a Second Order Attack. This is where supposedly clensed data that is already sitting in the database can be used to form an attack. All the data used is internal to the system at the time the SQL is formed, but the threat is just as real.

Ron Savage wrote:

Another excellent bit of advice, yet again completely outside the context of the discussion.

Ron Savage wrote:

Neither the original question nor my response involved building a query from any external data.

Ron Savage wrote:

Without the inclusion of external text that may at some point have been entered by an end user of the program - SQL Injection attacks are not an issue.

pramodprakash2005 wrote:

How we can store the backup in SQL ?

mrkeivan wrote:

Could you give me a sample by any chance ?

SELECT T2.col1, T1.Col2, T2.Col3
FROM T1
RIGHT OUTER JOIN T2 ON T1.Col1 = T2.Col1

select
   t2.col1,
   t1.col2,
   t2.col3
from
   tab2 t2

   LEFT OUTER JOIN tab1 t1
      ON ( t1.col2 = ascii(t2.col3) - 96 )


Results:
col1        col2        col3 
----------- ----------- ---- 
1           1           a    
1           2           b    
1           NULL        c    
1           NULL        d    

rangaSL wrote:

I would like to know the advantages of using ADO.NET in C# application development.