从all_tab_cols中查找表和列信息
我试图根据存储过程中包含的列来识别表类型。我最初提出的查询如下:
SELECT CASE WHEN col_one. IS NOT NULL THEN 'COL1'
WHEN col_two IS NOT NULL THEN 'COL2'
ELSE 'NEITHER'
END
INTO ls_table_type
FROM (SELECT column_name col_one
FROM sys.all_tab_cols
WHERE upper ( owner ) = upper ( '|OWNER|' )
AND hidden_column = 'NO'
AND virtual_column = 'NO'
AND column_id IS NOT NULL
AND column_name = '|COL1_NAME|'
AND table_name = upper(|TABLE_NAME|))
,(SELECT column_name as col_two
FROM sys.all_tab_cols
WHERE upper ( owner ) = upper ( '|OWNER|' )
AND hidden_column = 'NO'
AND virtual_column = 'NO'
AND column_id IS NOT NULL
AND column_name = '|COL2_NAME|'
AND table_name = upper(|TABLE_NAME|))
除非两列都存在于表中,否则该查询不起作用。我确信我错过了一些明显的攻击方法。
I am trying to identify table types based on the columns they contain in a stored procedure. The query I initially came up with is as follows:
SELECT CASE WHEN col_one. IS NOT NULL THEN 'COL1'
WHEN col_two IS NOT NULL THEN 'COL2'
ELSE 'NEITHER'
END
INTO ls_table_type
FROM (SELECT column_name col_one
FROM sys.all_tab_cols
WHERE upper ( owner ) = upper ( '|OWNER|' )
AND hidden_column = 'NO'
AND virtual_column = 'NO'
AND column_id IS NOT NULL
AND column_name = '|COL1_NAME|'
AND table_name = upper(|TABLE_NAME|))
,(SELECT column_name as col_two
FROM sys.all_tab_cols
WHERE upper ( owner ) = upper ( '|OWNER|' )
AND hidden_column = 'NO'
AND virtual_column = 'NO'
AND column_id IS NOT NULL
AND column_name = '|COL2_NAME|'
AND table_name = upper(|TABLE_NAME|))
This does not work unless both columns are present in a table. I am sure I am missing some obvious way of attacking this.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
此查询应该为您提供所需的信息。如果 col1 和 col2 不存在于同一个表中,那么您将不会获得任何重复记录。
This query should give you the information you need. If col1 and col2 don't exist in the same table then you won't get any duplicate records.
你可以试试这个:
You could try this: