From: akm@in-press.co.uk.invalid   
      
   Bob Barrows wrote:   
   > Avoiding dynamic sql is a better goal, especially if writing web-based   
   > applications (sql injection is enabled by the use of dynamic sql).   
      
   That isn't exactly accurate: you can use parameters in SQL generated at   
   run-time by the application.   
      
   --   
   Andrew   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)