Pete Finnigan's Oracle Security Weblog

I just found Edward Stanglers post that is a comment on my post yesterday about a good paper introducing Java used in stored procedures. This is the paper that Mark Rittman found first.

As Ed points out I have currently disabled comments in my blog, I may re-enable them in the future but not at present. I also saw that Andrej Koelewijn has had some troubles with comments in his blog.

So Ed made a post to his own blog to add some information to my yesterday post. Ed made a good point that was alluded to in the original article but not explained is that its possible to create the Java completely in SQL*Plus using the "CREATE REPLACE AND COMPILE" syntax. Ed gives some examples links from Tom's book. he also makes a good point about using Java instead of C external procedures. He also corrects my memory about where I heard that you should use SQL first, then PL/SQL, then Java then C.

Thanks for the update Edward!