Re: Strange issue in embedded sql

[Charles Wilt <charles.wilt@xxxxxxxxx>]

You realize of course that accepting SQL statements from the user is a bad
thing...given the suseptibility to SQL injection.

If you're  subject to PCI requirements, such code will fail a PCI mandated
secure code review.

Charles


On Thu, Jan 31, 2013 at 4:07 AM, Nisha Ramesh <n4nisha@xxxxxxxxx> wrote:

> I have a program which accepts the Sql statements user enters and these
> statements are passed onto a sqlrpgle program which declare a scroll cursor
> and prepares the sql from the string which holds input parameter. It then
> issues a fetch first statement into a field which will hold the query
> reasult. I am checking sql code to determine whether the entered query is
> valid or not. I close the cursors after this. If first time i entered a
> valid sql i get the result..for second time if some irrelevant data is
> entered still the fetch statement returns previous sql's output and sqlcod
> also is zero as if i entered correct sql. Pls help me to figure out the
> problem here....
> --
> This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L)
> mailing list
> To post a message email: RPG400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> or email: RPG400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/rpg400-l.