I'm trying to assign rows in a table to a random variable entirely in Transact SQL (This is MS SQL Server 2000, sp3). I've got it working perfectly except I can't use a variable inside my subquery ...

Can a simple dash character introduce a security risk? Discover how SQL line comments can open the door to unexpected injection vulnerabilities in several PostgreSQL client libraries!