views:

21

answers:

1

Hello, I have a task to build asp.net C# web form to allow end user to generate sql queries.

Very similar to this one: EasyQuery.NET WebForms

However I'm not allowed to use any 3rd party DLL's or spend big $ on full source versions. My boss would rather force me to work overtime and re-invent the wheel.

Any tips on this?

Thanks!

A: 

I would recommend against this - you open yourself up to a whole host of SQL Injection attacks. You might be able to consider using OData and then expose a query engine like they used for the StackExchange OData Explorer.

TodK
Right, but depends on how it's used. If it's in an admin panel where only the site owner has access I doubt he'll purposely truncate is own tables.
aron