|
From a SQL injection standpoint, I would just use an enum to enumerate the table options and pass that parameter to the method you are calling this from. You can't inject squat in SomeEnum.ToString().
|
# ¿ Nov 8, 2007 18:12 |
|
|
# ¿ Apr 28, 2024 22:06 |
|
Powdered Toast Man posted:Edit: Golbez, I have a great deal of problems due to Jet 3 being ridiculously inefficient with anything beyond a simple SELECT...especially over a network. Can I assume that using indexed fields in my queries will speed that up? I do notice that JOINs are almost always faster than a nested query... Indexes definitely help. The other big thing that helps with JET is to not open and close connections like one should do with SQL Server (or most other server RDBMSs). Seems like there is no connection pool. Depending on how much you are reading/writing, it can speed things up greatly. I should note my principal use for Access DBs these days is as data stores/logging tools for some command line utilities we use to import things into the CRM system here.
|
# ¿ Nov 28, 2007 21:42 |
|
^^^What that man said. Most reporting layers easily support running totals with ease.
|
# ¿ Dec 5, 2007 21:30 |
|
Yes, there is a command line sql client. See osql.exe for Sql 2000 [I think] and sqlcmd.exe for Sql 2005.
|
# ¿ Jan 25, 2008 16:19 |
|
jwnin posted:I think the key item here is that if you're a DBA these days, you pretty much also need a copy of Visual Studio to truly round out your toolbox. Management Studio is pretty good, but not all the way there. I don't believe you can debug stored procs without it, and even the BI studio includes a stripped down version. Anything with SQLCLR definitely would benefit from it. Actually, Management Studio is based on Visual Studio. And the BI tools are visual studio, they just install a limited number of project templates. quote:Unless of course you're using SSIS in which case good luck trying to figure out what juju needs to be done to get the parameterization to work right. And if you do figure that out let me know Well, I did manage to call a parameterized stored proc from a script task once. But that was probably not what you wanted to hear.
|
# ¿ Feb 13, 2008 19:39 |