How to write SQL query inside javascript block

Hi
Can any one help how to write SQL QUERY inside javascript

EX:

On 17.07.2008, at 11:19, babu nair wrote:

  Can any one help how to write SQL QUERY inside javascript

First that’s not a list about javascript.
Second you don’t want to let your clients talk directly with your
database.
Third if you really want do this, I think you want to attack a db
through
other people by XSS and we shouldn’t help you.

Think about JS. It’s running in the browsers JS-engine of your clients.
Do you really trust all your clients?
From attackers point of view it’s nice. We can directly communicate
with your
DB and you couldn’t do anything to prevent this, because you trust
us. Clients
have never been trustworthy!

hth. regards, Sandor
Szücs

show contact no on the bases of Customername as we select it from drop
down

show contact no on the bases of Customername as we select it from drop
down

This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs