mirror of
https://github.com/EiffelSoftware/eiffel-org.git
synced 2025-12-06 23:02:28 +01:00
Update wikipage Defending against SQL injections with EiffelStore. (Signed-off-by:javier).
git-svn-id: https://svn.eiffel.com/eiffel-org/trunk@1770 abb3cda0-5349-4a8f-a601-0c33ac3a8c38
This commit is contained in:
@@ -19,3 +19,9 @@ A template query is a string containing the fixed parts of the query and placeho
|
||||
|
||||
{{Note|the way you bind variables to the query is quite important and it will define if your query is safe and avoid a SQL Injection attack.}}
|
||||
|
||||
== How to define placeholders (variables) in a SQL Template query? ==
|
||||
Variables syntax is simple: the ':' special character followed by the variable name, something like <code>:value</code>
|
||||
|
||||
<code>SELECT * FROM TABLE_NAME WHERE field1 = :value</code>
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user