Skip to Content (Press Enter)
2025-01-09 14-56-57
IQ78
312Views
4Comments
Solved
EncodeSql should only be used
Question

Hi there,

I use this fragment in sort property of Refresh Data:

SyntaxEditor Code Snippet

EncodeSql(List_SortColumn_GetOrderBy(XXXXTable.Id, DefaultOrder: "LOSDATE"))

and the warning comes up:

EncodeSQL should only be used to escape string literals. Check the ....

Then, I tried to fix it, by concatenate with zero string, and the warning is gone:


SyntaxEditor Code Snippet

EncodeSql("" + List_SortColumn_GetOrderBy(XXXX.Id, DefaultOrder: "LOSDATE"))

 My question, is this fixing is on the right track?

Regards

0
0
10 Sep 2019
Copy Link
2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP
Solution

Then you need it like this

EncodeSql(List_SortColumn_GetOrderBy(XXXXTable.Id, DefaultOrder: EncodeSql("LOSDATE")))
See solution in context
2
0
10 Sep 2019
Copy Link
2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

IHi,

I don't think you need EncodeSQL in List SortColumn.

Regards,

Daniel

0
0
10 Sep 2019
Copy Link
2025-01-09 14-56-57
IQ78

Hi Sir,

If i remove it, there is another warning:

Ensure the expand line argument is protected by using EncodeSql() or verifysqlLiteral()...

regards

0
0
10 Sep 2019
Copy Link
2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP
Solution

Then you need it like this

EncodeSql(List_SortColumn_GetOrderBy(XXXXTable.Id, DefaultOrder: EncodeSql("LOSDATE")))
2
0
10 Sep 2019
Copy Link
2025-01-09 14-56-57
IQ78

Thank you very much Sir,

You are so helpful genius!

regards

0
0
10 Sep 2019
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.