RE: Tracing iSeries SQL Queries from a web page

The Ramones sing "I wanna be injected..."

> -------- Original Message --------
> Subject: RE: Tracing iSeries SQL Queries from a web page
> From: "Brian Piotrowski" <bpiotrowski@xxxxxxxxxxxxxxx>
> Date: Fri, January 13, 2006 10:09 am
> To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
> 
> Hi Walden,
> 
> No, it's an internal webpage accessible only to our associates.
> 
> Brian.
> 
> -----Original Message-----
> From: Walden H. Leverich [mailto:WaldenL@xxxxxxxxxxxxxxx] 
> Sent: Friday, January 13, 2006 9:43 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Tracing iSeries SQL Queries from a web page
> 
> >KLSD="select krcode,count(krcode) CD from spsl.kls_data where kplcd='"
> &
> >request.form("plantcode") & "' and char(krdate)='" & sdate & "' and 
> >(krtime between '06:30:00' and '15:30:59') group by krcode" 
> 
> Brian,
> 
> This isn't a publicly accessible web page, is it? What happens if I send
> the form back with the following in the plantcode field?
> 
> Plantcode = aaa' group by krcode;update spsl.kls_data set krtime =
> '12:00:00';--
> 
> -Walden
> 
> ------------
> Walden H Leverich III
> Tech Software
> (516) 627-3800 x3051
> WaldenL@xxxxxxxxxxxxxxx
> http://www.TechSoftInc.com
> 
> Quiquid latine dictum sit altum viditur.
> (Whatever is said in Latin seems profound.)
> 
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
> 
> 
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.