Skip to main content
Question

How to create a Quick report / SQL with a dynamic FROM statement

  • February 24, 2022
  • 1 reply
  • 265 views

Warren Pietersz
Do Gooder (Employee)
Forum|alt.badge.img+1

I am trying to use select * from <report_id> where result_key = &result_key to create a quick report for a user given result_key AND report_id as input parameters. (example report_id : Cust_Age_Analysis_Rep)

it is not possible to give an input parameter for the from view/table.

What are the possible options to solve this issue?

This topic has been closed for comments

Himasha Abeywickrama
Superhero (Customer)
Forum|alt.badge.img+18

Hi @Warren Pietersz,

 

Not sure if this can be done in the application since it introduces a major security vulnerability as it allows the user to directly enter the value of the table name which would make your query susceptible to SQL injection.


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings