From: "Sandor Szücs" <sandor.szuecs@...>
Date: 2008-07-17T19:08:10+09:00
Subject: Re: How to write SQL query inside javascript block


On 17.07.2008, at 11:19, babu nair wrote:

>       Can any one help how to write SQL QUERY inside javascript

First that's not a list about javascript.
Second you don't want to let your clients talk directly with your  
database.
Third if you really want do this, I think you want to attack a db  
through
other people by XSS and we shouldn't help you.

Think about JS. It's running in the browsers JS-engine of your clients.
Do you really trust all your clients?
 From attackers point of view it's nice. We can directly communicate  
with your
DB and you couldn't do anything to prevent this, because you trust  
us. Clients
have never been trustworthy!

hth. regards, Sandor Szücs
--