I don’t know how many of you out there have been to Don Smith’s Dev4Net blog, but if you are into SQLXML, you should definitely stop by, it is written entirely in SQLXML 3.0, and he has made the source available.

There is not much about SQLXML and Delphi around on the net.(This one is the only good one I've found) Specially when it comes to the usage of SQLXML over HTTP. That's why I started putting some procedures and functions together for my own use during different projects. Here is a sample of those procedures and functions for those who want to have SQLXML working with Delphi over the Internet.

Microsoft SQLXML, included as part of Microsoft SQL Server 2000 Gold or available as a separate add-on component for SQL Server, could allow a remote attacker to execute arbitrary script on the system, caused by improper validation of the "Root" parameter in an XML SQL query. SQLXML is a component used to exchange Extensible Markup Language (XML) data with a SQL server. A remote attacker could include malicious script within the "Root" parameter of an XML SQL query. This would allow the attacker to create a link on a Web page that calls a vulnerable XML SQL query. After the victim clicks the link, the script would be executed in the victim's Web browser within the security context of the local Intranet Zone, once a reply is received from the SQL Server running the SQLXML component.

PDC. We use the SqlXml product quite extensively. Wait. That's an understatement. We use SqlXml exclusively. For those of you who don't understand or who are dismissing me, take another look - it's awesome technology.

Microsoft SQLXML 3.0 lets you leverage you existing Transact-SQL stored procedures by generating WSDL files for single or multiple query resultsets. This article shows you how to take advantage of SQLXML 3.0's new capabilities, such as delivering strongly-typed DataSets to populate DataGrids. It also includes source code for a Visual Basic .NET Windows form consumer of sample Web services from the OakLeaf Web site.

I hammered the SQLXML guys at the PDC today. I want to know whether SQLXML is regarded (rightly) as awesome progressive technology, or merely a step towards either ObjectSpaces or (worse) XML datatypes in Yukon.

Use SQLXML's Web services to access XML data directly from your ASP.NET applications.

The Transact SQL SELECT statement was extended in SQL Server 2000 to tell the database engine to return data as an XML stream instead of as a rowset. The FOR XML clause is used with the SELECT statement to convert a rowset into XML format.