Answers that one. MSSQL uses @ for variable definitions Like the SQL*Plus & substitution and variable definition?
GG -----Original Message----- From: James Holmes [mailto:[email protected]] Sent: Tuesday, February 10, 2009 9:34 PM To: sql Subject: Re: sql injection That's an MSSQL script, not an Oracle one. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ 2009/2/11 George Gallen <[email protected]>: > > I just tried to run this using SQL*Plus, and received back: > > SQL> select @@servername, > 2 system_user, > 3 db_name() > 4 ; > select @@servername, > * > ERROR at line 1: > ORA-00936: missing expression > > I very new to Oracle/SQL, and have the Oracle 10g home edition > running on a XP machine, if that matters. Just curious as why > it didn't return the expected information. > > Thanks > GG > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/sql/message.cfm/messageid:3191 Subscription: http://www.houseoffusion.com/groups/sql/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.6
