Blazin JZN

Oracle’s JSON Path Expression (JPE ) uses specific characters such as dollar signs and dots to step through JSON structures.  For example a JPE of $.NAME steps to the NAME key at the absolute top of a JSON structure. Whenever invalid syntax JPE syntax is encountered Oracle throws an error with a JZN prefix. Why … Read more

You say passing, I say using…let’s call the whole thing off I use colons, you use dollar signs, let’s call the whole thing off The previous post presented some pretty complex code including: JSON Path Expressions (dollar signs, ampersands, etc) Dynamic SQL (colons and the USING clause) JSON_EXISTS (PASSING clause) I promised an explanation of … Read more

In this post I’ll explain how to make Dynamic SQL with JSON Path Expressions (JPE) safe from SQL Injection. Or would it be JPE injection? Let’s figure that out later. For now lets get into the code! Here is the function that queries the patient name for a given Ordering System (OS) and Medical Record … Read more