Plateforme Level Extreme
Abonnement
Profil corporatif
Produits & Services
Support
Légal
English
Update doesn't work without thisform
Message
Information générale
Forum:
Visual FoxPro
Catégorie:
Codage, syntaxe et commandes
Versions des environnements
Visual FoxPro:
VFP 9 SP2
OS:
Windows 7
Divers
Thread ID:
01525200
Message ID:
01525258
Vues:
41
>>Try this
TEXT to mSqlcommand noshow pretext 15 TEXTMERGE
>>UPDATE MyView
>>	SET
>>		Field1 = nValue1, 
>>		Field2 = <<.nSomeValueIHave>> 
>>	WHERE code = nValue3
>>ENDTEXT
>>&mSqlCommand
>>
>>Be sure to remove all semicolons in your code. The TEXTMERGE comment will replace
<<.nSomeValueIHave>>
with the value of your form property.
>>HTH
>
>
>Bad idea. SQL injection risk
>
>Relevant:
>http://xkcd.com/327/

I just realized you are using this in a view. I only use this in PRGs working on local cursors and the code is compiled into an EXE. In that case there can be no risk.
Beer is proof that God loves man, and wants him to be happy. - Benjamin Franklin
John J. Henn
Précédent
Répondre
Fil
Voir

Click here to load this message in the networking platform