Comments on: SqlDependency and DateTime values http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/ Straight from the mind of geniuseseses.... Fri, 06 Aug 2010 07:40:27 -0700 hourly 1 http://wordpress.org/?v=3.0.1 By: gerrod http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/comment-page-1/#comment-1448 gerrod Mon, 06 Oct 2008 07:59:36 +0000 http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/#comment-1448 Hmm... I take your point, but I don't necessarily agree. 1) This was for an internal application, so not only is everyone's access logged, but I'd find it difficult to believe that someone inside the company would maliciously attack the software; but even so - 2) The date/time parameter in this instance was never supplied by a user; it was always a generated parameter (in fact, it was always "DateTime.Today"). Still, I agree that using parameters is always the best option; it's just that in this instance, I didn't think it would work! Hmm… I take your point, but I don’t necessarily agree.

1) This was for an internal application, so not only is everyone’s access logged, but I’d find it difficult to believe that someone inside the company would maliciously attack the software; but even so -

2) The date/time parameter in this instance was never supplied by a user; it was always a generated parameter (in fact, it was always “DateTime.Today”).

Still, I agree that using parameters is always the best option; it’s just that in this instance, I didn’t think it would work!

]]> By: Ben http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/comment-page-1/#comment-1447 Ben Mon, 06 Oct 2008 06:48:00 +0000 http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/#comment-1447 You should <b>always</b> use SqlParams and <b>never ever</b> approach a problem like your initial suggestion as this opens you application up to SQL Injection Attacks. Something you want to avoid at all costs. You should always use SqlParams and never ever approach a problem like your initial suggestion as this opens you application up to SQL Injection Attacks.

Something you want to avoid at all costs.

]]> By: viiviiviivii http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/comment-page-1/#comment-1421 viiviiviivii Wed, 01 Oct 2008 08:48:09 +0000 http://quickduck.com/blog/2008/09/22/sqldependency-and-datetime-values/#comment-1421 I start coding at VF on Monday (first time in 4 months), so, I thought I'd check up on what you Quick Duckers were up to! Good to see you are still doin stuff.. :) I start coding at VF on Monday (first time in 4 months), so, I thought I’d check up on what you Quick Duckers were up to!

Good to see you are still doin stuff..

:)

]]>