Hello,
I've been working on a auto report generator for a bunch of views we  
have in our Oracle 9i database. I have the simple builder done and  
working but the problem I'm having is that once the simple sql query  
is built I then allow the creator to modify the SQL statement  
directly. I normally would not have a problem with this but in order  
to segregate data, I have to inject a where clause of my own in to  
the mix. I can't allow the users to modify the our WHERE clause or  
they could gain access to all of the data, which we don't want.

I guess what I'm asking for is a better solution or answer to  
injecting a WHERE clause in to a SQL statement so that I don't have  
to parse every little piece of it just to know where to put my part in.


I hope this makes sense I've been at this for a while.

Thanks,
- Charles

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:224343
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to