Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.misc -> Re: Understanding EXECUTE IMMEDIATE

Re: Understanding EXECUTE IMMEDIATE

From: Dave <x_at_x.com>
Date: Mon, 26 Sep 2005 21:58:06 GMT
Message-ID: <O9_Ze.116281$G8.9160@text.news.blueyonder.co.uk>

"pbewig_at_swbell.net" <pbewig_at_gmail.com> wrote in message news:1127770503.003040.303560_at_g47g2000cwa.googlegroups.com...
> Actually, it's the other way around. I have a procedure in my client
> program that must be called at the appropriate time by a procedure in
> the package -- a callback. And I have to pass an argument from the
> package procedure back to the procedure in the client program.
>
> I'm an old lisp hacker, trapped in a PL/SQL body. This kind of thing
> -- higher-order functions -- is normal in the lisp world, but doesn't
> exist in the PL/SQL world. I'm trying to find a way to make it work.
>
> Phil
>

do a search on sqlP_injection - you can let your users execute arbitrary code - very very insecure Received on Mon Sep 26 2005 - 16:58:06 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US