RE: Is there a better way to run SQL in a CL pgm?

["Stone, Joel" <Joel.Stone@xxxxxxxxxx>]

Just curious - what IS acceptable in your shop?  Placing SQL stmts in a source member?  Other methods?

Thanks

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Thursday, March 29, 2012 8:51 AM
To: Midrange Systems Technical Discussion
Subject: Re: Is there a better way to run SQL in a CL pgm?

Note that in our shop...

Doing dynamic SQL like this means and automatic failure of our Secure
Code Review as required for PCI compliance...

Unless RJS's DOCSQL doing something other than what I assume it does...

Charles

On Wed, Mar 28, 2012 at 12:05 PM, Stone, Joel <Joel.Stone@xxxxxxxxxx> wrote:
> To do this in CL gets a bit messy with the single-quotes, 2x single quotes, etc.
>
> I am using the RJS software command DOCSQL.
>
> Does IBM provide an SQL interface for running in directly in CL similar to what is shown below?
>
> (without storing commands in a source file member?)
>
> Any idea why they dont?
>
> Is there a better way to do this in CL?
>
> Thanks again!
>
> chgvar &sqlCmd ('select client_n,'                                             +
> *tcat 'max(case when client_act = ''S''  then ''S'' else '' '' end)          ' +
> *tcat ' as Settlement_Act,'                                                    +
> *tcat 'max(case when client_act = ''M''  then ''M'' else '' '' end)          ' +
> *tcat ' as Memo_Act,'                                                          +
> *tcat 'max(case when client_act = ''C''  then ''C'' else '' '' end)          ' +
> *tcat ' as Contract_Act'                                                       +
> *tcat ' from clientact group by client_n order by client_n')
>
>             RJSIMAGE/DOCSQL SQLSTM(&SQLCMD) OUTPUT(*OUTFILE) +
>                        SRCF(QTEMP/SQLOUTFILE)
>
>
> ______________________________________________________________________
> This outbound email has been scanned for all viruses by the MessageLabs Skyscan service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.