Re: Alternatives to using utl_file

From: <oracle_at_ukcert.org.uk>
Date: Tue, 16 Dec 2008 15:01:46 +0000
Message-ID: <5630dadb0812160701l3d837edbg8e2823cb5f7c8d89@mail.gmail.com>


Hello Niall,
I have written a "CREATE_DIRECTORY" package which is a security controlled implementation of CREATE ANY DIRECTORY specially for this purpose..
http://www.oracleforensics.com/wordpress/index.php/create_directory/ Feel free to use it and send me improvements. Cheers,
Paul

>still a security nightmare, but you could grant 'CREATE ANY DIRECTORY' to
>your application account and then create the directory object at runtime as
>well.

On Tue, Dec 16, 2008 at 2:01 PM, John Dunn <JDunn_at_sefas.com> wrote:

> OK, thanks
>
> The biggest issue I have with utl_file is needing to define utl_file_dir=
>
> Since the directories we need to access are not known till run time we have
> to specify utl_file_dir=*, which is a security nightmare.
>
>
>
>
> **
>
> *John *
>

--
http://www.freelists.org/webpage/oracle-l
Received on Tue Dec 16 2008 - 09:01:46 CST

Original text of this message