|
The SQL Statement tab of the Web Service property sheet has the following components:
This web service has the following SQL statement Shows the SQL statement for the web service (if one has been specified). Selecting this option enables the text box below where you can enter the SQL statement for the web service.
The statement is the command, usually a stored procedure, that is called when someone accesses the service. If you define a statement, this is the only statement that can be run through this service. Services without statements are a serious security risk as they permit web clients to execute arbitrary commands. When creating such services, you must enable authorization, which forces all clients to provide a valid user name and password. Even so, only services that define statements should be run in a production system.
The SQL statement is required for SOAP services. It is optional for RAW, XML, and HTML services, and is not applicable to DISH services.