Get generated SQL statement from MySqlCommand

Question

I am using MySqlCommand to bind parameters so things are properly escaped and sanitized but I'm not directly executing the command on the machine that generates it. I need to send it as raw SQL to another machine that executes it.

Right now I'm manually looping through parameters and replacing the CommandText but this doesn't do any of the sensitization. Anyone have any idea how to generate the SQL that is sent on .ExecuteNonQuery() ?

The whole point of parameters is that that doesn't happen. Parameters are sent separately from the query body. — SLaks
– SLaks, Commented Jun 6, 2013 at 20:11
I need to send it as raw SQL to another machine that executes it. -that statement confuses me. You need to serialize the command and send it to a web service maybe to execute it? — Mike Perrenoud
– Mike Perrenoud, Commented Jun 6, 2013 at 20:14
Ah I see the prepared statements are server side. And yes I need to somehow send the MySqlCommand to another server to execute it. I was hoping it could go as a string but it's looking like I have to serialize it which I wanted to avoid because it sends way more data than required. — Dharun
– Dharun, Commented Jun 6, 2013 at 20:16
Can you send the command and parameters separately, then assemble and execute at the source? — Maxwell Donathan
– Maxwell Donathan, Commented Jun 6, 2013 at 20:32

Community · Accepted Answer · 2017-05-23 12:22:17Z

1

It's because it's not just like calling String.Replace() on the query.

Parameterized queries are actually handled differently by the RDBMS than plain queries, so it's not as simple as having some sort of "RawQuery" property. The only way to do this is to "roll your own", using info from this answer.

edited May 23, 2017 at 12:22

CommunityBot

11 silver badge

answered Jun 6, 2013 at 20:23

Greg Bair

6696 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dharun Over a year ago

In the end it's still one big SQL statement that's sent to the server, I was just hoping I could get that out. Thanks for the link though.

Greg Bair Over a year ago

@Dharun, No, it's not. A proper RDBMS client does not send one big SQL statement. It sends the parameters separately from the query, in the same connection. The database then does its thing with interpolating the query with the parameters.

Collectives™ on Stack Overflow

Get generated SQL statement from MySqlCommand

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related