I have a project in Vision where I am running a recipe database system through SQL and populating screen data using numerous button commands attached to NQ's. I have all of these basic NEW, SAVE, DELETE, LOAD, INSERT functions working. The area I am having trouble with is where I'm trying to attach…

The :Value parameterType can only be used in WHERE clauses. (There may be some exceptions - I'd have to check). You need to change to a {QueryString} to use it in the RENAME TO function. Be aware that this may expose you to SQL injection and precautions have to be taken. The idea of creating separa…

[image] Transistor: only be used in WHERE clauses No, :value parameters can be used for any data. They cannot be used for any SQL structure, which includes column/table/schema names. [image] Transistor: Be aware that this may expose you to SQL injection and precautions have to be taken. …

[image] pturmel: case allows the user to choose their table name, it is not safe. I'm not sure I'm understanding exactly what you're saying here but there is an "UPDATE" button that pulls a string from a textbox to use to update the process name, which in turn would update the table name simu…

These two (randomly chosen) introductory articles explain how SQL injection can be performed by a user on a vulnerable system. SQL Injection and What Is SQL Injection and How Does It Work? | Black Duck . In your proposed system the user can, for example, type into the text box commands to delete rec…

[image] Warren_McDonald: pulls a string from a textbox to use to update the process name This is not safe. You are feeding a user-entered string directly into SQL. A malicious user can break your DB and possible break your entire system. You could, theoretically, run some kind of validatio…

Inductive Automation Forum

Duplicating & Renaming SQL Master Table

Ignition

bschroeder January 19, 2025, 3:43pm 7

4 Likes