title: SQL Injection prevention with dynamic SQL ALTER USER query
body: <p>Is this good way to prevent sql injection in dynamic sql alter user query:</p>
  
  <pre><code>BEGIN
      z_ident :=  DBMS_ASSERT.ENQUOTE_NAME(ident);    
      z_pass := DBMS_ASSERT.ENQUOTE_NAME(password); 
      z_sql := 'alter user ' || z_ident || ' identified by ' || z_pass;
      EXECUTE IMMEDIATE z_sql;
  END;
  </code></pre>
  
  <p>Because, sometimes you have function to generate random password with " character, and when you do:</p>
  
  <pre><code>SELECT DBMS_ASSERT.ENQUOTE_NAME('"asd') FROM DUAL;
  </code></pre>
  
  <p>You get an ORA-06512 / ORA-06502 exception.</p>