Highlighted

how to use sql parameter

Avatar

13-08-2008

Hell,<br /><br />After I write pdf form, when I clicked the <submit button> in pdf form, I want to save data to MS SQL SERVER.<br /><br />I use Adobe Livecycle desinger v.8.1 program.<br /><br />My question is,<br />1. How to query with <where> statment <br /> ex) SELECT * FROM pubs WHERE title_id = '<param>'<br /><br />2. How to save to MS SQL SERVER<br /> ex) INSERT INTO pubs VALUES ('<param1>','<param2>',...)<br /><br />Thanks for any help that you can give!

Replies

Highlighted

Avatar

Avatar

_Aandi_Inston_

Avatar

_Aandi_Inston_

_Aandi_Inston_

13-08-2008

A warning which I hope is appropriate... even if you have taken care

of this, it may help other people who read this. The code you have

written will leave your SQL server wide open to attacks of the kind

which have compromised many web sites recently, so your server can be

used for sending spam, collecting passwords, stealing credit card

details etc.



Be sure you know what "SQL injection" is. You MUST check in detail all

of the data that you insert into an SQL command, even simple SELECT

statements, or you can be attacked. See the Wikipedia entry on SQL

Injection to get started.



Aandi Inston
Highlighted

Avatar

Avatar

_Aandi_Inston_

Avatar

_Aandi_Inston_

_Aandi_Inston_

13-08-2008

A warning which I hope is appropriate... even if you have taken care

of this, it may help other people who read this. The code you have

written will leave your SQL server wide open to attacks of the kind

which have compromised many web sites recently, so your server can be

used for sending spam, collecting passwords, stealing credit card

details etc.



Be sure you know what "SQL injection" is. You MUST check in detail all

of the data that you insert into an SQL command, even simple SELECT

statements, or you can be attacked. See the Wikipedia entry on SQL

Injection to get started.



Aandi Inston
Highlighted

Avatar

13-08-2008

Thanks for your response.<br />I agree yours.<br />Then is safe method that using webservice with <where> statement.<br />And can I use filter data in livecycle designer?<br /><br />I'm sory my badly english...<br /><br />regards.
Highlighted

Avatar

Avatar

_Aandi_Inston_

Avatar

_Aandi_Inston_

_Aandi_Inston_

14-08-2008

You can use JavaScript to filter data.



Aandi Inston
Highlighted

Avatar

27-08-2008

Hi Aandi Inston,



I try to search a script but I can't it.

Can you please send the samples of script for filter data or web site link.

My E-mail: pesung153@hotmail.com



Thanks a lot.
Highlighted

Avatar

Avatar

_Aandi_Inston_

Avatar

_Aandi_Inston_

_Aandi_Inston_

27-08-2008

>I try to search a script but I can't it.



No, you would write it.



>Can you please send the samples of script



Please don't ask for samples. This is seen by some people as saying

"please write a script for me". But this is the programmer's job!



Aandi Inston