Data query method and data query device

Abstract

The invention provides a data query method and a data query device, wherein the method comprises the following steps that when variable names carried in structured query language (SQL) statements are received, query condition values which are inputted by a user according to the variable names are obtained; the variable names and the query condition values are bound; the data types of query results outputted by the execution of the SQL statements are prejudged; according to the prejudged data types, data storage variable arrays are assigned to the query results outputted by the execution of the SQL statements; the SQL statements are executed, the query results are stored into the assigned data storage variable arrays, and the query results stored in the data storage variable arrays are provided for an application. The invention solves the technical problem that under the condition of uncertain query conditions, the SQL method of binding variables cannot be adopted to query data, which causes the low security of data query and the low data processing efficiency of a system, and therefore the technical effect of effectively increasing data query security and data processing efficiency is achieved.

Description

technical field [0001] The invention relates to the technical field of data processing, in particular to a data query method and device. Background technique [0002] The Oracle database is one of the current mainstream databases. At present, many enterprises use the Oracle database to store enterprise data. In the process of using application software, it is often necessary to query with flexible conditions. For example, a query may have multiple query conditions, but not all query conditions are necessary, and users often only need some of them when using them. conditions to meet the query requirements. Therefore, a flexible query is required to allow users to flexibly grasp the dimension and granularity of the query, so that the results required by the user can be found more conveniently and quickly. [0003] For the above-mentioned flexible query, it can usually be implemented directly in JAVA. However, due to the consideration of the hierarchical design of the system,...

AI Technical Summary

Problems solved by technology

[0004] However, in actual use, the local dynamic Structured Query Language (Structured Query Language, SQL) in the procedural SQL (Procedural Language / SQL, PL / SQL) language used by the stored procedures of the Oracle database uses binding When variables are fixed, only fixed query conditions can be supported

If the query conditions are not fixed, but you need to use SQL, then you need to use the non-binding variable method to query. However, the non-binding variable SQL query method has the following two problems: 1) It will cause a large number of queries due to the inability to share SQL. 2) Since the variable value is directly written into the SQL statement text in the non-binding variable method, there is a problem of SQL introduction, which is prone to security risks

Images