Will Insensitive Like become potential sql injection?
Will Insensitive Like become potential sql injection?
- Subject: Will Insensitive Like become potential sql injection?
- From: "Yung-Luen Lan" <email@hidden>
- Date: Thu, 28 Aug 2008 23:50:04 +0800
Hi,
I want to match my email case-insensitively, it seems that the easiest
way is using ERXQ.ILIKE.
I wonder if that will introduce SQL injection vulnerability into my system:
assuming adversary have * or % in his email address query string, will
that hurt my database security?
Regards,
yllan
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden