Thursday, September 22, 2005
Dynamic SQL in PL/SQL, or alternately titled, thank god for version control
If coding was surgery, today would be the day my malpractice went through the roof.
Because 4 patients would've died on my table today.
4 times I had to go back to CVS and fetch a clean file of the copy of the file I was working on. The task that I'm working on is modifying one of our search routines. I'm trying to modify the cursor code to implement bulk binds and dynamic SQL that cannot be exploited by SQL Injection.
And it works fine if you don't mind the whole "not returning results" bug.
So essentially, I'm trying to upgrade code written for Oracle 8i w/o any best practice guide to something that's more up to the times, 9i style guide with native dynamic sql.
Assuming I can get it to generate something meaningful.
*sigh* back it.
Because 4 patients would've died on my table today.
4 times I had to go back to CVS and fetch a clean file of the copy of the file I was working on. The task that I'm working on is modifying one of our search routines. I'm trying to modify the cursor code to implement bulk binds and dynamic SQL that cannot be exploited by SQL Injection.
And it works fine if you don't mind the whole "not returning results" bug.
So essentially, I'm trying to upgrade code written for Oracle 8i w/o any best practice guide to something that's more up to the times, 9i style guide with native dynamic sql.
Assuming I can get it to generate something meaningful.
*sigh* back it.
