Dynamic SQL

Meer over het boek

An introduction and deep-dive into the many uses of dynamic and on-the-fly generated SQL in Microsoft SQL Server. Dynamic SQL is key to large-scale searching based upon user-entered criteria. It's also useful in generating value-lists, in dynamic pivoting of data for business intelligence reporting, and for customizing database objects and querying their current structure. Executing dynamic SQL is at the heart of applications such as business intelligence dashboards that need to be fluid and respond instantly to changing user needs as those users explore their data and view the results. Yet dynamic SQL is feared by many due to concerns over SQL injection attacks. The imagined complexity of executing dynamic SQL can also be intimidating, but need not be. Reading Dynamic SQL: Applications, Performance, and Security is your opportunity to learn and master an often misunderstood feature, including everything you'll need to know about security and SQL injection. Some of dynamic SQL's most powerful applications are both simple and elegant, and can be frequently used tools for any developer or database administrator. All aspects of security relevant to dynamic SQL are discussed in this book