C#: Query composition with string manipulation and execute

[AshokG]

Hi,

I'm using C#. 

Is it possible to compose the Query using string manipulation and execute like SQL?

For example in SQL we do sql = "select id, name, age from " + tableName +

                                                         "where region ='" + region + "' and flag=1"

executeQuery(sql)

Can RQL help in this matter?

Mainly I'm experiencing issues duplicating the query code where Generic Types or Base types have commonality 

--

thanks

[Igal Merhavia]

Hi,

You can use raw query - https://ravendb.net/docs/article-page/4.2/csharp/client-api/session/querying/how-to-query#session.advanced.rawquery

Best Regards,

Igal

--
You received this message because you are subscribed to the Google Groups "RavenDB - 2nd generation document database" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ravendb+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ravendb/68035f90-a338-4213-a1ab-1fec891aa5f7n%40googlegroups.com.

[Oren Eini (Ayende Rahien)]

Note that when you do things like that, please avoid concating with user params, to avoid injection attacks

To view this discussion on the web visit https://groups.google.com/d/msgid/ravendb/CAADcGSm-HP8CLQTC%3DTC%2B5zTErLf%3DzOTxBadRH1RunL8nXipSzA%40mail.gmail.com.

[Peter]

Is there a way to actually use user params like in sql taking injection into account?

E.g. from Collection as a where a.Name = @name select a

Cheers!

Op maandag 1 maart 2021 om 20:23:26 UTC+1 schreef Oren Eini:

[Igal Merhavia]

Hi,

You can do something like this:

session.Advanced.RawQuery<Payment>("from index 'PaymentAll' where AmountLeft == $pq").AddParameter("pq", 0).ToList();

Best regards,
Igal

You received this message because you are subscribed to the Google Groups "RavenDB - an awesome database" group.

To unsubscribe from this group and stop receiving emails from it, send an email to ravendb+u...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/ravendb/a42263e0-25b7-49bf-a65c-05e081b19f80n%40googlegroups.com.