The SQL statements are provided with parameters. The parameters can be used using the syntax `:NAME`. These parameters consist of all HTTP parameters provided through GET and/or POST, excluding the following which are reserved for use by Invantive Data Access Point itself: - `connection`, - `contenttype`, - `contentfilename`, - `format`, - `includeheaders`, - `usetechnicalheaders`, - `password`, - `preset`, - `printparameters`, - `query`, - `user`, - `xsl`. The list of parameter values is extended by values from the context in which Data Access Point runs. The following parameter values are added based upon the URL: - `DAPURIOriginalString`: the original value. - `DAPURIAbsolutePath`: the absolute path. - `DAPURIHost`: the host name. - `DAPURILocalPath`: the local path. - `DAPURIPathAndQuery`: the path and query. - `DAPURIPort`: the port number. - `DAPURIQuery`: the query. - `DAPURIScheme`: the scheme. - `DAPURIUserInfo`: the user information. The following values based upon the current connected user: - DAPUserInfoCompanyID: the company ID. - DAPUserInfoCompanyName: the company name. - DAPUserInfoCompanyPhone: the company phone number. - DAPUserInfoCompanyWebSite: the company web site. - DAPUserInfoEmailAddress: the email address. - DAPUserInfoFirstName: the first name. - DAPUserInfoFullName: the full name. - DAPUserInfoGender: the gender. - DAPUserInfoLanguage: the user interface language. - DAPUserInfoLastLogon: the last log on moment. - DAPUserInfoLastName: the last name. - DAPUserInfoLinkedIn: the LinkedIn profile. - DAPUserInfoLogOnCode: the log on code. - DAPUserInfoMiddleName: the middle name. - DAPUserInfoMobileNumber: the mobile phone number. - DAPUserInfoNationality: the nationality. - DAPUserInfoPhoneNumber: the phone number. - DAPUserInfoPictureUrl: the picture (URL). - DAPUserInfoSkype: the Skype profile. - DAPUserInfoTitle: the title. - DAPUserInfoTwitter: the Twitter profile. - DAPUserInfoWebSite: the web site. The following parameter values are added based upon the current preset: - DAPPresetFileName: the file name. - DAPPresetAction: the action. - DAPPresetCode: the code. - DAPPresetConnectionName: the full name of the connection. - DAPPresetContentType: the content type of the output. - DAPPresetFormat: the format. - DAPPresetSQLFile: the SQL file name. - DAPPresetSQLStatement: the SQL statement. - DAPPresetXSLLocation: the XSL file name. - DAPPresetIncludeHeaders: whether to include headers in the output. - DAPPresetHeaderFormat: the header format of the output. - DAPPresetPrintParameters: whether to print parameters and their values in the output. Plus the following parameter values: - DAPSystemIPAddressDeviceExternal: the external IP address of the web server. - DAPSystemIPAddressDeviceInternal: the internal IP address of the web server. - DAPSystemIPAddressUserExternal: the external IP address of the current user. - DAPSystemIPAddressUserInternal: the internal IP address of the current user. - DAPShowConfidentialDetails: whether to include confidential details. - DAPPrintParameters: whether to print and their values in the output. - DAPIncludeHeaders: whether to include headers in the output. - DAPUseTechnicalHeaders: whether to use technical headers in the output (column name) instead of user-friendly label. - DAPSQLFile: the SQL file name. - DAPXSLLocation: the XSL file name. - DAPDeviatingConnectionName: the forced different full connection name. - DAPDeviatingContentType: the forced different content type of the output. - DAPDeviatingContentFileName: the forced different content file name of the output.