possible to store server side scripts on sql server?

[User]

HI,

i intend to save some asp scripts on the server.

eg: i store this script on the server

<%="hello"%>

i save this under table "table1" , column name "title"

then i proceed to write out the server script:

set rs = conn.execute("select title from table1")
response.write rs("title")

but the results doesnt execute the stored asp script.

am i doing the wrong way?

i intend to store some asp server scripts on the server...

thanks

Posted Via Usenet.com Premium Usenet Newsgroup Services
----------------------------------------------------------
** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
----------------------------------------------------------
http://www.usenet.com

[McKirahan]

"User" <user@emailwrote in message
news:11*************@sp6iad.superfeed.net...

HI,

i intend to save some asp scripts on the server.

eg: i store this script on the server

<%="hello"%>

i save this under table "table1" , column name "title"

then i proceed to write out the server script:

set rs = conn.execute("select title from table1")
response.write rs("title")

but the results doesnt execute the stored asp script.

am i doing the wrong way?

i intend to store some asp server scripts on the server...

You're just returning the string of ASP code.

Try using Eval() to apply it -- untested.

[Justin Piper]

On Fri, 29 Dec 2006 12:29:01 -0600, McKirahan <Ne**@McKirahan.comwrote:

"User" <user@emailwrote in message
news:11*************@sp6iad.superfeed.net...

>HI,

i intend to save some asp scripts on the server.

eg: i store this script on the server

<%="hello"%>

You're just returning the string of ASP code.

Try using Eval() to apply it -- untested.

That has a lot of limitations. Foremost, it's highly insecure, but it also
defeats IIS's script context caching (so every statement will have to be
recompiled with every page load), prevents you from keeping your code
under revision control, and makes it impossible to use templates (i.e.,
you would need to use Response.Write "hello" rather than <%= "hello" %>).

A better design might be to store an identifier in the table, and then use
GetRef() to resolve it to a function, e.g:

<% Set rs = conn.Execute("SELECT title FROM table1")
Set f = GetRef(rs("title"))
f()
%>

<% Function SayHello() %>
hello
<% End Function %>

--
Justin Piper
Bizco Technologies
http://www.bizco.com/

[User]

Thanks !

Got it!

I've used Execute() instead.

Without the eval() tip, i wouldnt have found execute()

=)

"McKirahan" <Ne**@McKirahan.comwrote in message
news:Fe******************************@comcast.com. ..

"User" <user@emailwrote in message
news:11*************@sp6iad.superfeed.net...

>HI,

i intend to save some asp scripts on the server.

eg: i store this script on the server

<%="hello"%>

i save this under table "table1" , column name "title"

then i proceed to write out the server script:

set rs = conn.execute("select title from table1")
response.write rs("title")

but the results doesnt execute the stored asp script.

am i doing the wrong way?

i intend to store some asp server scripts on the server...

You're just returning the string of ASP code.

Try using Eval() to apply it -- untested.

Posted Via Usenet.com Premium Usenet Newsgroup Services
----------------------------------------------------------
** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
----------------------------------------------------------
http://www.usenet.com

[Bob Barrows [MVP]]

You should read this:
http://blogs.msdn.com/ericlippert/ar.../01/53329.aspx

User wrote:

Thanks !

Got it!

I've used Execute() instead.

Without the eval() tip, i wouldnt have found execute()

=)

"McKirahan" <Ne**@McKirahan.comwrote in message
news:Fe******************************@comcast.com. ..

>"User" <user@emailwrote in message
news:11*************@sp6iad.superfeed.net...

>>HI,

i intend to save some asp scripts on the server.

eg: i store this script on the server

<%="hello"%>

i save this under table "table1" , column name "title"

then i proceed to write out the server script:

set rs = conn.execute("select title from table1")
response.write rs("title")

but the results doesnt execute the stored asp script.

am i doing the wrong way?

i intend to store some asp server scripts on the server...

You're just returning the string of ASP code.

Try using Eval() to apply it -- untested.

Posted Via Usenet.com Premium Usenet Newsgroup Services
----------------------------------------------------------
** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
----------------------------------------------------------
http://www.usenet.com

--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"

[McKirahan]

"Bob Barrows [MVP]" <re******@NOyahoo.SPAMcomwrote in message
news:OU**************@TK2MSFTNGP03.phx.gbl...

You should read this:
http://blogs.msdn.com/ericlippert/ar.../01/53329.aspx

That's for JScript not VBScript; though even that article states:
"There are a few scenarios in which eval is invaluable.".

[snip]

"McKirahan" <Ne**@McKirahan.comwrote in message
news:Fe******************************@comcast.com. ..

[snip]

Try using Eval() to apply it -- untested.

[Bob Barrows [MVP]]

McKirahan wrote:

"Bob Barrows [MVP]" <re******@NOyahoo.SPAMcomwrote in message
news:OU**************@TK2MSFTNGP03.phx.gbl...

>You should read this:
http://blogs.msdn.com/ericlippert/ar.../01/53329.aspx

That's for JScript not VBScript; though even that article states:

The same reasoning applies to Execute. A new compiler is spawned consuming
resources and impairing performance.
Part two of the series
(http://blogs.msdn.com/ericlippert/ar.../04/53335.aspx) describes
the security hole opened by the use of these methods.

"There are a few scenarios in which eval is invaluable.".

And this is not one of the situations he describes.
Justin described a perfectly workable alternative to Execute, but as usual,
the alternatives look a little harder and the Execute/Eval crutch is picked
up.

--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"