sql文档中心

-- create by zh
-- n 是作物的时间,x 是希望在几点成熟,返回播种的时间
with t as
(
select 64 n,9 x from dual union all
select 64 n,13 x from dual union all
select 64 n,17 x from dual union all
select 64 n,20 x from dual
)
select '成熟时间:'     || lpad(to_char(n),4,' ')                            || '   ;' ||
       '摘取时间:'     || lpad(to_char(x),4,' ')                            || '   ;' ||
       '播种时间:'     || lpad(to_char(mod(24+( x - mod( n,24)),24)),4,' ') || '   ;'
jg from t
......

1 防止sql注入式攻击(可用于UI层控制） #region 防止sql注入式攻击(可用于UI层控制）
2
3   /**/ ///
4 /// 判断字符串中是否有SQL攻击代码
5 ///
6 /// 传入用户提交数据
7 /// true-安全；false-有注入攻击现有；
8 public   bool ProcessSqlStr( string inputString)
9    {
10       string SqlStr =   @" and|or|exec|execute|insert|select|delete|update|alter|create|drop|count|\*|chr|char|asc|mid|substring|master|truncate|declare|xp_cmdshell|restore|backup|net +user|net +localgroup +administrators " ;
11       try
12         {
13           if ((inputString !=   null ) && (inpu ......

在我们日常使用SQL Server数据库时，经常遇到需要在实例Instance01中跨实例访问Instance02中的数据。例如在做数据迁移时，如下语句:
insert into Instance01.DB01.dbo.Table01
          select * from Instance02.DB01.dbo.Table01
普通情况下，这样做是不允许的，因为SQL Server默认不可以跨实例访问数据。解决方案是使用存储过程sp_addlinkedserver进行实例注册。
sp_addlinkedserver在MSDN中的定义为:
sp_addlinkedserver [ @server= ] 'server' [ , [ @srvproduct= ] 'product_name' ]
      [ , [ @provider= ] 'provider_name' ]
      [ , [ @datasrc= ] 'data_source' ]
      [ , [ @location= ] 'location' ]
      [ , [ @provstr= ] 'provider_string' ]
      [ , [ @catalog= ] 'catalog' ]
例如：在Instance01实例中，执行如下SQL语句
EXEC sp_addlinkedserver ‘Instance02’ //� ......

基于msdn 详细学习T-SQL (http://msdn.microsoft.com/zh-cn/library/bb510741.aspx)
Aggregate function--Sum() Two Sample from msdn
USE AdventureWorks;
GO
SELECT Color, SUM(ListPrice), SUM(StandardCost)
from Production.Product
WHERE Color IS NOT NULL
    AND ListPrice != 0.00
    AND Name LIKE 'Mountain%'
GROUP BY Color
ORDER BY Color;
GO
USE AdventureWorks;
GO
SELECT Color, ListPrice, StandardCost
from Production.Product
WHERE Color IS NOT NULL
    AND ListPrice != 0.00
    AND Name LIKE 'Mountain%'
ORDER BY Color
COMPUTE SUM(ListPrice), SUM(StandardCost) BY Color;
GO
......

问题一
有这样的一个问题，数据库中有两个表，分别是Guest,Hotel，即旅客信息表和旅馆信息表，Guest表中有一个旅客编码的字段，这个字段的有20位，它的前10位代表这个旅客所住的旅馆，现在的问题是要根据Guest表中的旅客编码字段信息查到他所住的旅馆的名称和旅馆地址！
问题解决:
SQL SERVER的SQL语句：select Guest.旅客编码,Guest.旅客姓名,Hotel.旅馆名称,Hotel.旅馆地址 from Guest,Hotel where Hotel.旅馆编码=SubString(Guest.旅客编码,1,10)
Oracle的SQL语句：select Guest.旅客编码,Guest.旅客姓名,Hotel.旅馆名称,Hotel.旅馆地址 from Guest,Hotel where Hotel.旅馆编码=SubStr(Guest.旅客编码,1,10)
......

Five basic search conditions are summarized here:
1) Comparison test
2) Range test
3) Set membership test
4) Pattern matching test (Like)
     The pattern matching test checks to see whether the data value in a column matches a specified pattern
   % mathes any sequence of zero or more characters.
   _ matches any single character.
// Find products whose product IDs start with the four letters "A%BC"
      SELECT order_num ,product
       from orders
      WHERE product LIKE 'A$%BC' ESCAPE '$' ;
5) Null value test (IS NULL)
In SQL's three-valued logic, a search condition can yield a TRUE,FALSE, or NULL result. Only rows where search codition yields a TRUE result are included in the query result.
Rules For Single-Table Query Processing
The from clause is applied first; the where clause is applied next ; the SELECT clause is applied next . Finally ......

oracle sql 求种菜时间

oracle sql 求种菜时间

C#.NET防止SQL注入式攻击

C#.NET防止SQL注入式攻击

SQL Server如何跨实例访问数据库

学习 T SQL (1)

在SQL语句中截取字符串函数的应用

SQL learning