[xquery-talk] questions about security and dynamically constructedqueries

[Dhruba Borthakur]

Hi Michael and Per,

Thanks for your explanations. I was touching on two issues and your answers 
address
them both.

The first question was whether most XQuery implementations support creating
an query dynamically and then executing it. From what I gather, this feature 
is
in fact, supported by a few implementations.

The second question was whether a XQuery code can detect if a library has
been imported and if so, then invoke a function in the library. If the 
library is
non-existent, then ignore the error. I gathered that no existing 
implementations
have support for this yet.

thanks,
dhruba

>From: "Michael Kay" <mhk at mhk.me.uk>
>To: "'Per Bothner'" <per at bothner.com>,"'Dhruba Borthakur'" 
><dhruba_borthakur at hotmail.com>
>CC: <talk at xquery.com>
>Subject: RE: [xquery-talk] questions about security and dynamically 
>constructedqueries
>Date: Tue, 21 Oct 2003 22:41:10 +0100
>
> > I would expect most implementations would support this, possibly
> > exception those those that only support "stored queries".  After all
> > most databases allow you to create SQL dynamically, so you
> > there is no
> > reason not to do the same for XQuery.  And implementation
> > that are not
> > tied to a database will probably also mostly allow dynamic query
> > construction.  This certainly includes Qexo.
> >
> > Perhaps I'm misunderstanding your question.
>
>I think he's looking for something like the dyn:evaluate() function in
>EXSLT. This isn't provided in XQuery 1.0 (nor in XSLT 2.0, to my
>regret).
>
>Michael Kay

_________________________________________________________________
Want to check if your PC is virus-infected?  Get a FREE computer virus scan 
online from McAfee.    
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963