On Tue, Feb 3, 2009 at 5:47 AM, Deviloper wrote:
>
> But some bad guy could showed up and force the poor developer not to use
> perl-vars in SQL-Statements for security reasons.
>
> Is ist possible to use tablenames like normal bind-variables?
> Is there a better way to solve this problem?
Using
I think his issue is getting list to the server side without
concatenating strings.
You can't use bind variables as table names or column names.
You may be able to write a stored procedure which takes a table name as
a variable, does the string concatenation on the server side, and uses
Orac
On Tue, Feb 3, 2009 at 8:47 AM, Deviloper wrote:
> Hello there!
>
> lets assume that one has a list of tables @db_tables. (For Example one per
> Month)
> Lets assume one wants to find some data in the tables. (For Example sold
> Items.)
>
> select sales from $db_tables[0]; # gives all sold items
