The correct way to avoid SQL injection attacks, no matter which database you use, is to separate the data from SQL, so that data stays data and will never be interpreted as commands by the SQL parser. It is possible to create an SQL statement with correctly formatted data parts, but if you don’t fully … Read more
I’ll help you with your first question, and I’ll leave to you the second. Display doctorid, dname, total fees received by the doctor(s) who have treated more than one patient? Let’s split this problem in pieces: So you need first to know which doctors have treated more than one patient. That information is in the … Read more
The SQL query is probably something like: SELECT LastName FROM Providers WHERE LastName LIKE ‘PrefixText%’ ORDER BY LastName LIMIT count; — This may be TOP in MS SQL or ROWNUM in Oracle Which means: Give me all rows from the table Providers where the LastName column starts with PrefixText (whatever that variable contains). I want … Read more
you are saying that on change in four table you want to update the record in 5th table. For this purpose you can write an update trigger which will trigger on change on any one of the four tables and check if the needed values in four tables are updated and it will change accordingly … Read more
To link VB variables to an SQL query, you need to add parameters that store the variables and then use those parameters in your SQL command: Using parameters MyCommand = New SqlCommand(“SELECT Height, Weight, DoB, Gender, FROM `User` WHERE Username = @Username”, DatabaseConnection) MyCommand.Parameters.AddWithValue(“@Username”, Username) UPDATE: How to connect to database ‘Leads to the database … Read more
Try this: SELECT amount – (amount * discount_percentage / 100) FROM tableA; 0 solved Mysql: How do I subtract a percentage from a number
Even though this question is Way too broad, and actually not asking anything, i’ll give it a few minutes of attention. 1) You backup the current state and work on a Sandbox! 2) if your only need is few reports, i guess you can generate them query the different databases independently and maybe post processing … Read more
Just check this sample , you have to use charindex(to find the index of comma) and substring function to get substring value Declare @var varchar(50) = ‘21699,21712’ select charindex( ‘,’, @var), substring ( @var, charindex(‘,’, @var)+1, len(@var)) you can also use this too: declare @var varchar(50) = ‘21699,21712’ select charindex( ‘,’, @var), substring ( @var, … Read more
Maybe something like this: var result= ( from s in db.Stands join cp in db.ContractProducts on s.Id equals cp.StandId join p in db.Products on cp.ProductId equals p.Id where s.EventId == 1 group p by p.Description into g select new { Description=g.Key, TotalArea = g.Sum (x =>x.TotalArea) } ).ToList(); Where db is the linqdatacontext 1 solved … Read more
If you fix your syntax to select * from table1, table2; you will get a join where every condition is true, which is the same as the Cartesian product of the two tables. table1 table2 —— —— A 1 B 2 C Result: A 1 A 2 B 1 B 2 C 1 C 2 … Read more