Re: OPS$ in Oracle6

From: Yves Noel <noel_at_omega.univ-lille1.fr>
Date: 16 Dec 1993 08:34:10 GMT
Message-ID: <2ep6i2$3gs_at_netserver.univ-lille1.fr>


In article <CI1D0I.CqJ_at_uk.ac.brookes>, p0070621_at_oxford-brookes.ac.uk (Tommy Wareing) writes:
|>Henry Ford (ccshf_at_midge.bath.ac.uk) wrote:
|>
|>> I have started to use the OPS$ technique to add users to the ORACLE6
|>> system and have run into a problem. Part of my forms system calls a
|>> .sql file to construct another sql file and run it. The username is
|>> selected from sys.dual for identification purposes and is passed to
|>> the file with the &1 parameter e.g.
 

|>> 'select '||'''&1'''||',
 

|>> etc.
 

|>> This was fine until I tried the OPS$username, when all that gets passed
|>> is OPS. So far I have failed to get the username passed, or even
|>> OPS$username, which would be sufficient for identification.
|>> Any help from out there would be gratefully acknowledged !
|>
|>Is the string OPS$whatever going to the system command line at any point?
|>I'd guess you're using UNIX, and the $whatever is seen as a non-existant
|>environment varable.
|>
|>
|>--
|> _________________________ __________________________________________
|>/ Tommy Wareing \ / I've been looking for an original sin, \
|>| p0070621_at_brookes.ac.uk X One with a twist and a bit of a spin |
|>\ 0865-483389 / \ -- Pandora's Box, Jim Steinman /
|> ~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|>
 IT'S TRUE but easy to bypass --> you simply protect the $ by \ : OPS\$...

-- 
------------------------------------------------------------------------------
   _/_/_/_/    _/_/_/_/   _/_/_/_/   _/_/_/_/                  I use
  _/_/          _/_/       _/_/       _/_/               ORACLE v6.0.36.5.2
 _/_/          _/_/       _/_/       _/_/                       on        
_/_/_/_/ .  _/_/_/_/ .   _/_/ .   _/_/_/_/ .            DEC RISC ULTRIX v4.3
------------------------------------------------------------------------------
Yves NOEL   -   Database Administrator         Mail : Yves.Noel_at_univ-lille1.fr
C.I.T.I. (batiment M4)                             
Universite des Sciences & Technologies de Lille      Phone : (33)  20.43.42.70
59655 Villeneuve d'Ascq Cedex - FRANCE               Fax   : (33)  20.43.66.25 
------------------------------------------------------------------------------
Received on Thu Dec 16 1993 - 09:34:10 CET

Original text of this message