RSA Scripts

Ad Hoc unsafe statements

  1. Sql Server
  2. Cache
  3. Intermediate
  4. Vaknin Sammy

Last updated:

Warning: Review and test in a non-production environment before running.

Back to results

-- Adapted from demo scripts by Kimberly L. Tripp, SQLskills – https://www.sqlskills.com/blogs/kimberly/

  SELECT [m].*   FROM [dbo].[member] AS [m]  WHERE [m].[lastname] = 'Anderson';  
  SELECT [m].*   FROM [dbo].[member] AS [m]  WHERE [m].[lastname] = 'Tripp';  
  SELECT [m].*   FROM [dbo].[member] AS [m]  WHERE [m].[lastname] LIKE '%e%';  
  SELECT [m].*   FROM [dbo].[member] AS [m]  WHERE [m].[lastname] LIKE 'Anderson';  
  SELECT [m].*   FROM [dbo].[member] AS [m]  WHERE [m].[lastname] LIKE 'Tripp';  
 

 As we can see, the statements was not parameterized.
 Every statement was put in cache becuse sql know that the plan can change from run to run.

Parameterized statement are for very simple statements.