On Fri, Oct 5, 2012 at 6:22 AM, mikey <moussa.h...@gmail.com> wrote: >> >> Don't drop SPROCS and regen them from your VB code >> The application is meant to allow users to search for records using >> different search criteria and it is multi user applicaton. That is why I am >> 'allowing' users to create and drop their own stored procedure on the fly. >> The stored procedure is being dropped by the used whenever the results are >> displayed. Is there any other alternative? >> >> >> Learn to pass in the params that you want to use in the where clause. >> do you mean, parms that is passed to the stored procedure?.is a >> parametrized stored procedure faster? > > >> >> >> So replace it. It looks all kinds of M$ tweaked for the receiving >> >> container and not optimized to accept data from a datareader. >> I know dataReader are faster. When I used them users were getting error >> saying datareadear was not closed, that happened randomly. >> > ------------------------
If a user can type ANY TEXT INTO a textbox and that becomes part of a Stored procedure you are creating a very unsafe system for data. Just ask SONY about user defined queries. :) -- Stephen Russell Sr. Analyst Ring Container Technology Oakland TN 901.246-0159 cell -- You received this message because you are subscribed to the Google Groups "DotNetDevelopment, VB.NET, C# .NET, ADO.NET, ASP.NET, XML, XML Web Services,.NET Remoting" group. To post to this group, send email to dotnetdevelopment@googlegroups.com To unsubscribe from this group, send email to dotnetdevelopment+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/dotnetdevelopment?hl=en?hl=en or visit the group website at http://megasolutions.net
