> Is there any way to capture the response from SQL Server > in a variable to display to an end user? > > For example, if I allow a user to run an arbitrary SQL > command against the server using a web interface and > they run a DROP TABLE on a table that doesn't exist - > instead of erroring, how can I grab the actual response > from SQL Server? Anyone have any ideas?
I don't have an answer to your question, really. However, in general, I would recommend that you do your best to avoid allowing people to run arbitrary SQL commands through a web interface. I apologize in advance if this is a hypothetical example. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm
