1. DATABASE DEVELOPMENT (IT203P)
WESTLAKE DATABASE
(2015)
Juanita M. McConnell
Computer Network Systems
ITT Technical Institute
Philadelphia PA 19106
Contact:
JMcConnell152@email.itt-tech.edu

2. WESTLAKE DATABASE PROJECT OBJECTIVES
1. Creating a table with a primary key
2. Defining a Primary Key
3. Types of Primary Keys
4. Creating a stored procedure to guard against
SQL injection attacks.
5. Executing queries to meet requirements.

3. CREATING A TABLE WITH A PRIMARY KEY
You can create a table using the CREATE TABLE command or by right-clicking the
Tables folder and running New Table. You can assign primary key functions to attributes
by selecting the golden key icon in column adjacent to Column Name.

4. PRIMARY KEYS
A primary key is an attribute that uniquely identifies an entity.
It should have a unique value, very uneasy to guess, not ever
change, and be previously non-existent or non-established.

5. TYPES OF PRIMARY KEYS
Five Types of Primary Keys
Composite Primary Key – a primary key that is made up of more than one attribute.
Surrogate Primary Key – a primary key that is computer generated and usually numeric.
Natural Key – a real world identifier such as an email address.
Candidate Key- a primary key with the capabilities to be a primary key.
Foreign Key – a primary key assigned to a second table as a secondary key formatting a
connection between the tables.

6. CREATING A STORED PROCEDURE TO
GUARD AGAINST SQL INJECTION ATTACKS
A SQL injection attack is the addition of malicious code to a
SQL statement with the intention to corrupt the database.
• To combat intrusions, data analysts can use stored procedures
to guard against SQL injection attacks.
• Stored procedures help protect against SQL injection because
queries will only accept values of the data type specified in the
parameter and multiple statements will not be executed as a
batch.

7. CREATING A STORED PROCEDURE TO
GUARD AGAINST SQL INJECTION ATTACKS
This a query statement designed to guard against a DELETE statement that
would execute all data from the Patients table, if the DELETE permission had
been compromised.

8. CREATING A STORED PROCEDURE TO
GUARD AGAINST SQL INJECTION ATTACKS
This a query statement designed to copy records from
RecordPatientSymptoms and insert them into the PatientVisitSymptoms table.

9. EXECUTING QUERIES TO MEET
REQUIREMENTS I
You can use a SELECT statement to retrieve data.
It supports the following clauses:
 FROM—identify the table
 ORDER BY—sort the data
 WHERE – filter the data
 LIKE—retrieve data that matches a pattern =, <, >—retrieve
data that meets a condition BETWEEN—retrieve data in a
range
 JOIN—join two tables together
 GROUP BY—group aggregated data

10. EXECUTING QUERIES TO MEET
REQUIREMENTS I
This is a query statement designed to retrieve the visit date and patient key for all patients that
reported a depression level over 5.

11. EXECUTING QUERIES TO MEET
REQUIREMENTS II
This is a query statement designed to retrieve the visit date and patient name, and depression
levels for all patients that reported a depression level over 5.

12. EXECUTING QUERIES TO MEET
REQUIREMENTS III
This is a query statement designed to retrieve the number of patient visits that occurred in which
the patient had a pulse over 45.

13. EXECUTING QUERIES TO MEET
REQUIREMENTS IV
This is a query statement designed to lists the visit date and patient name for each patient visit,
sorted by depression level from lowest to highest.

14. EXECUTING QUERIES TO MEET
REQUIREMENTS V
This is a query designed to display the patient’s last name, average pulse and average depression
level for each patient.

16. DATABASE DEVELOPMENT (IT203P)
WESTLAKE DATABASE
(2015)
Author Note
Juanita M. McConnell, Computer Network Systems, ITT Technical Institute.
Juanita McConnell is a student at ITT Technical Institute studying Computer
Networking, Computer Infrastructure and Computer Programming.
Correspondence concerning this PowerPoint should be addressed to
Juanita McConnell ,
Computer Network Systems,
ITT Technical Institute, 105 South 7th St., Suite 100 Philadelphia, PA 19106
Contact: JMcConnell152@email.itt-tech.edu