RE: SQL0803: "duplicate key value specified"

["Elvis Budimlic" <ebudimlic@xxxxxxxxxxxxxxxxxxxxxxxxx>]

If James' application allows users to enter or create SQL dynamically, it's
definitely a possibility.

If only the WHERE clause is dynamic... I don't think SQL syntax would allow
for injection of an INSERT or an UPDATE within it. Well... short of
terminating the SELECT with a semicolon perhaps and adding one or more
statements following it. This would assume the underlying code can process N
number of statements, not just one.
But, let's not get ahead of ourselves.  Let's see what James finds first.

Elvis

Celebrating 11-Years of SQL Performance Excellence on IBM i, i5/OS and
OS/400
www.centerfieldtechnology.com


-----Original Message-----
Subject: RE: SQL0803: "duplicate key value specified"

Good point about the select.
Perhaps someone has figured out how to do "SQL injection" into his select 
statement and is really doing an update or an insert?

Rob Berendt