Use SQL Server Integration Services?
(Althought TBH, writing your own C# is probably less painful than some of the faffing you have to do in SSIS.)
As for SQL Injection attacks, there's nothing that'll explicitly prevent that sort of thing, so you still have to clean your parameters before using them, but you can set up the security so that the user who calls the stored procedure don't have the rights to drop tables or whatever.
Kenny
The Wisdom of IMDB Messageboards:
One Night At McCool's
There's one thing I don't understand: Why would Randy and Jewel, for some reason, have sex right at the beginning of the movie?
-- Um, like, are you kidding? Randy sees the golden opportunity (like finding plutonium by accident) and takes it.
|