This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.
Course Of The Month
8 days, 12 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Appending a text file with & and ' in the fields and double quots
Posted on 2012-12-27
Hello.
When I execute the below, my rrecords append to the correct file - they all begin and end with double quotes:
DECLARE @var1 varchar(4000);
SELECT @var1 = 'echo "' + col1 + CHAR(9) + col2 + char(9) + col3 + '" >>\\pathwhere\fileexists.t
EXEC master..xp_cmdshell @var1;
When I remove the double quotes, none of my records with ampersands and single quotes print - instead, this error is logged: 'fieldname' is not recognized as an internal or external command.
When I restore the double quotes, my fieldnames print but every row begins and ends with double quotes.
My customer can not have the double quote but still needs the data with ampersands and quotes in the tite field to print. (ex Micky & Minnie)
How can I either escape the double quotes or modify my statement so my titles with ampersands and single quotes append to my file?
When I execute the below, my rrecords append to the correct file - they all begin and end with double quotes:
DECLARE @var1 varchar(4000);
SELECT @var1 = 'echo "' + col1 + CHAR(9) + col2 + char(9) + col3 + '" >>\\pathwhere\fileexists.t
EXEC master..xp_cmdshell @var1;
When I remove the double quotes, none of my records with ampersands and single quotes print - instead, this error is logged: 'fieldname' is not recognized as an internal or external command.
When I restore the double quotes, my fieldnames print but every row begins and ends with double quotes.
My customer can not have the double quote but still needs the data with ampersands and quotes in the tite field to print. (ex Micky & Minnie)
How can I either escape the double quotes or modify my statement so my titles with ampersands and single quotes append to my file?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3 Comments
I guess issue is only with ampersand character and not with single quotes and that could be resolved by replacing each & character with ^&.
Like this:
DECLARE @var1 varchar(4000);
SELECT @var1 = 'echo ' + replace(col1, '&', '^&') + CHAR(9) + replace(col2, '&', '^&')
+ char(9) + replace(col3, '&', '^&') + ' >>\\pathwhere\fileexists.t
EXEC master..xp_cmdshell @var1;
Like this:
DECLARE @var1 varchar(4000);
SELECT @var1 = 'echo ' + replace(col1, '&', '^&') + CHAR(9) + replace(col2, '&', '^&')
+ char(9) + replace(col3, '&', '^&') + ' >>\\pathwhere\fileexists.t
EXEC master..xp_cmdshell @var1;
Optionally you can use SQLCMD ......
Here I have suppressed headers with ( -h -1) ..... and row-count summary with Set NoCount ON ...
This will produced desired result...
look at below link for full details...
http://msdn.microsoft.com/en-us/library/ms165702(v=sql.105).aspx
Create table temp (Col1 nvarchar(20),col2 nvarchar(20))
insert into temp
select 'Saurabh & bhadauria' , 'Saurabh " bhadauria '
DECLARE @var1 varchar(4000);
SELECT @var1 = 'SqlCMD -S. -E -h -1 -q " set nocount on select col1 + CHAR(9) + col2 from test_sa.dbo.temp ; " -o D:\33.txt'
EXEC master..xp_cmdshell @var1;
Here I have suppressed headers with ( -h -1) ..... and row-count summary with Set NoCount ON ...
This will produced desired result...
look at below link for full details...
http://msdn.microsoft.com/en-us/library/ms165702(v=sql.105).aspx
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Why is this different from all of the other step by step guides? Because I make a living as a DBA and not as a writer and I lived through this experience.
Defining the name:
When I talk to people they say different names on this subject stuff l…
Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes. We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
Viewers will learn how the fundamental information of how to create a table.
Suggested Courses
Course of the Month8 days, 12 hours left to enroll
734 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.