一个SQL语句的问题,总是编译过,请大家给看一下
SELECT rkdname.ywid AS ywid,"+
"rkdname.ljno As ljno,"+
"rkdname.units AS units,"+
"rkdname.bzsname AS bzsname,"+
"rkdname.spint AS spint,"+
"rkdname.zj AS zj,"+
"rkdname.adddate AS adddate,"+
"rkdname.sgov AS sgov,"+
"rkdname.invoice_no AS invoice_no"+
"rkdname.invoice_date AS invoice_date,"+
"ie.GR_NO AS gr_no,"+
"ie.BILL_NO AS bill_no,"+
"ie.IN_DATE AS in_date,"+
"bgd.mxdno AS mxdno,"+
"bgd.bgdh AS bgdh,"+
"bgd.zch AS zch "+
"FROM ie_gr ie,(SELECT * FROM "+table[i][0]+" WHERE id IN "+
"(SELECT id FROM YWList WHERE typeid="+typeid+" AND status=3)) rkdname,"+
"LEFT JOIN BGD_ZC_MX bgd ON bgd.ywid=rkdname.ywid "+
"WHERE ie.INVOICE_NO=rkdname.INVOICE_NO"+
" AND rkdname.INVOICE_NO IN (select INVOICE_NO from ie_gr)"+
" AND ie.LJNO<>rkdname.LJNO"+
" AND ie.QUANTITY<>rkdname.spint"+
" AND ie.AMOUNT<>rkdname.zj"+
" AND ie.CURR<>rkdname.bzsname"+
" AND ie.COUNTRY<>rkdname.sgov"+
" AND ie.UNIT<>rkdname.units";
"rkdname.ljno As ljno,"+
"rkdname.units AS units,"+
"rkdname.bzsname AS bzsname,"+
"rkdname.spint AS spint,"+
"rkdname.zj AS zj,"+
"rkdname.adddate AS adddate,"+
"rkdname.sgov AS sgov,"+
"rkdname.invoice_no AS invoice_no"+
"rkdname.invoice_date AS invoice_date,"+
"ie.GR_NO AS gr_no,"+
"ie.BILL_NO AS bill_no,"+
"ie.IN_DATE AS in_date,"+
"bgd.mxdno AS mxdno,"+
"bgd.bgdh AS bgdh,"+
"bgd.zch AS zch "+
"FROM ie_gr ie,(SELECT * FROM "+table[i][0]+" WHERE id IN "+
"(SELECT id FROM YWList WHERE typeid="+typeid+" AND status=3)) rkdname,"+
"LEFT JOIN BGD_ZC_MX bgd ON bgd.ywid=rkdname.ywid "+
"WHERE ie.INVOICE_NO=rkdname.INVOICE_NO"+
" AND rkdname.INVOICE_NO IN (select INVOICE_NO from ie_gr)"+
" AND ie.LJNO<>rkdname.LJNO"+
" AND ie.QUANTITY<>rkdname.spint"+
" AND ie.AMOUNT<>rkdname.zj"+
" AND ie.CURR<>rkdname.bzsname"+
" AND ie.COUNTRY<>rkdname.sgov"+
" AND ie.UNIT<>rkdname.units";
...全文
相关推荐
分享一下SQL Server执行动态SQL的正确方式
SQL Server执行动态SQL的话,应该如何实现呢?下面就为您介绍SQL Server执行动态SQL两种正确方式,希望可以让您对SQL Server执行动态SQL有更深的了解 动态SQL:code that is executed dynamically.它一般是根据用户输入或外部条件动态组合的SQL语句块.动态SQL能灵活的发挥SQL强大的功能、方便的解决一些其它方法难以解决的问题.相信使用过动态SQL的人都能体会到它带来的便利,然而动态SQL有时候在执行性能(效率)上面不如静态SQL,而且使用不恰当,往往会在安全方面存在隐患(SQL 注入式攻击). 动态SQL可以通过EXECUTE
易语言动态拼接sql语句
易语言动态拼接sql语句源码,动态拼接sql语句
SQL语句
NULL 博文链接:https://ssydxa219.iteye.com/blog/1569985
怎样防止SQL注入?
比如URL、表单等提交信息时,通过一段防止SQL注入的过滤代码即可防止出错信息暴露,或者通过转向,当系统出错时转到一个提示出错的页面等。
重新编译PLSQL中的无效对象或者指定的对象 的方法
重新编译PLSQL中的无效对象或者指定的对象 的方法


