RE: SQL CALL Statement

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

midrange-l-request@xxxxxxxxxxxx wrote:

>   8. RE: SQL CALL Statement (CWilt)
>
>Every program object on the iSeries can be called using the SQL call
>command.
>
>The only reason to go through the trouble of doing the CREATE PROCEDURE is
>to let SQL know how to handle parameters.  Without an SQL procedure
>definition it makes some assumptions about the parameters that may not be
>correct.

This is not only true, but also critical to keep in mind.

I've used this for years in order to access the QSNDDTAQ API over a TCP/IP 
connect via SQL CLI. Very handy. It works because I have no requirement for any 
return parameters. If return parameters are required, then a stored procedure 
must be defined.

But QSNDDTAQ is relatively benign. Other APIs and program objects can be 
serious trouble. Proper security is demanded for remote SQL access.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Switch to the New Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp