tags:

views:

25

answers:

1
Q: 

Continued:- can not use SqlAdapter ot DataSet or anything - just SqlCommand

You may refer to this post of mine

http://stackoverflow.com/questions/3092121/sql-going-nuts-does-not-accept-parameters

Simply put I don't have a choice I have to take input of which table the user wants and what the user wants from that table.

Please suggest a secure way to achieve this, within the limitations of the code

Thank you.

A: 

Why don't you just define the what each user can do by means of application roles in your SQL Server database - then you just try to select something, and if that user doesn't have the necessary rights, you'll get an exception that you can handle.

Seems the easiest rather than building your own elaborate security system - there are always potential flaws and gaping holes in those "I'll roll my own" schemes.......

marc_s  2010-06-22 12:31:35
will try thanks
 2010-06-22 15:18:45

related questions

Displaying Flash content in a C# WinForms application
How to get the value of built, encoded ViewState?
Unhandled Exception Handler in .NET 1.1
How do I connect to a database and loop over a recordset in C#?
How do I most elegantly express left join with aggregate SQL as LINQ query
Get a new object instance from a Type in C#
.NET Testing Framework Advice
Automatically update version number
What is the difference between an int and an Integer in Java/C#?
How to write to Web.Config in Medium Trust ?
WinForms ComboBox data binding gotcha
How do you sort a C# dictionary by value?
Adding Scripting functionality to .NET applications
Floating Point Number parsing: Is there a Catch All algorithm?
How do I print an HTML document from a web service?
Decoding T-SQL CAST in C#/VB.net
Anatomy of a "Memory Leak"
How do I get a distinct, ordered list of names from a DataTable using Linq
Reliable Timer in a Console Application
How do I fill a DataSet or a DataTable from a LINQ query resultset ?
What's the difference between Math.Floor() and Math.Truncate() in .NET?
How do I calculate relative time?
How do I calculate someone's age in C#?
Are there any conversion tools for porting Visual J# code to C#?
When setting a form's opacity should I use a decimal or double?