"MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx> wrote on 03/05/2018
03:29:49 PM:
One of the big things when concatenating strings to make &SQLSTMT is to
be
very specific. For example, CAST your variables.

&SQLSTMT = 'CALL MYPROC (' CONCAT &FileValue concat ')'
Can try calling totally different procedures if &FileValue is any of
these
values:
A
AA
1
01


I can see how that would be true if passing raw data. But, if I
always pass the data with concatenated single quotes around every data
parameter would it still need to be cast as character?


Sincerely,

Dave Clark

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.