Never use a schema name as package name

View All Scripts Login to Run Script

Script Name Never use a schema name as package name
Description Demonstrates a side effect when using a schema name as package name.
Area PL/SQL General / PL/SQL Procedures, Functions, Packages
Contributor Philipp Salvisberg
Created Saturday May 14, 2016

Statement 1

CREATE PACKAGE hello IS 
   PROCEDURE world; 
END hello;

Package created.

Statement 2

The use of dbms_output is prefixed with the schema name sys to avoid code injection through an alternative dbms_output package.

CREATE OR REPLACE PACKAGE BODY hello IS 
   PROCEDURE world IS 
   BEGIN 
      sys.dbms_output.put_line('Hello World!'); 
   END; 
END hello;

Package Body created.

Statement 6

SELECT object_name, object_type, status 
  FROM user_objects


OBJECT_NAME OBJECT_TYPE STATUS
HELLO PACKAGE VALID
HELLO PACKAGE BODY INVALID
SYS PACKAGE VALID

3 rows selected.

Additional Information