topic Re: INTENSION IS TO GIVE SQL QUERY STRING AS INPUT TO THE CUSTOM FUNCTION MODULE AND IT RETURN THE DATA in Application Development and Automation Discussions

INTENSION IS TO GIVE SQL QUERY STRING AS INPUT TO THE CUSTOM FUNCTION MODULE AND IT RETURN THE DATA

sumit2929 — Fri, 02 Jun 2023 14:04:59 GMT

Hi Expert,

I am trying to create a FM like /SAPDC/RFC_READ_TABLE2 In this table tab we put SQL query in option parameter.

SQL query is in combination of join two or more tables.

Once we pass SQL query which should return data of that tables.

Any one have similar code. please share.

Thank you,

Sumit

Re: INTENSION IS TO GIVE SQL QUERY STRING AS INPUT TO THE CUSTOM FUNCTION MODULE AND IT RETURN THE DATA

RaymondGiuseppi — Fri, 02 Jun 2023 14:23:07 GMT

How do you handle security check?

Once this has been established with the administrator and security manager...

For the dynamic select, look in online help (or your system) for this sample: demo_dynamic_sql
For the format of data exchange, consider xml

Re: INTENSION IS TO GIVE SQL QUERY STRING AS INPUT TO THE CUSTOM FUNCTION MODULE AND IT RETURN THE DATA

moshenaveh — Sun, 04 Jun 2023 06:11:57 GMT

sumit2929

Hello,

Please be sure to use lower case letters in the title.

Regards,

Moshe

Re: INTENSION IS TO GIVE SQL QUERY STRING AS INPUT TO THE CUSTOM FUNCTION MODULE AND IT RETURN THE DATA

Sandra_Rossi — Sun, 04 Jun 2023 08:09:53 GMT

What you are asking is rather complex because you must consider CL_ABAP_DYN_PRG to detect SQL injection attacks. So, you should parse the SQL query to split it in pieces, but then your code might contain vulnerabilities, and consequently I'd advise to not pass a SQL query directly, but a list of structured tokens which are used to build the SQL query and on which you can easily apply CL_ABAP_DYN_PRG.