Re: Reduce large amount of logicals in SUBFL pgm, take in another direction

Very, very BAD IDEA!

Horrible in fact.

I hope you're not subject to PCI compliance rules, as the code you
posted pretty much guarantees an automatic failure.

Try googleing for "SQL injection"...

Charles

On Fri, Jul 29, 2011 at 1:16 PM, Monnier, Gary <Gary.Monnier@xxxxxxxxx>
wrote:

Sharon,

The process that builds your SQL statement can have parameters passed to
it. One of these parameters can be a list of selections. Something
like this.

pgmToBuildSQL PR
nbrFieldsForWhereClause
arrayOfFieldsForWhereClause
arrayOfValuesForWhereClause


SQLStringBegin = 'Select * From yourfile ';

X = 1;
startPos = 1;

doW (X < = nbrFieldsForWhereClause);

whereValue = arrayOfFieldsForWhereClause(X) +
arrayOfValuesForWhereClause(X); //ValueFor can be = value, like value,
etc
valueLen = %len(%trimr(whereValue));
%subst(whereClause:startPos:valueLen) = whereValue;
startpos = startPos + valueLen + 1;
X = X + 1;

enddo;

Return;

--
This is the RPG programming on the IBM i / System i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.