36
Views
2
Comments
Sanitization - BuildSafe_InClauseTextList
Question

Can someone explain what does this description means on Sanitization - BuildSafe_InClauseTextList


"Returns a comma-delimited text value with the encoded version of all the text values provided as input. The returned value can be safely used in a SQL "IN" clause.

This method should only be used in queries against the Platform's main databaseBehavior can be unexpected when used against external databases."

Specially the green label pls.

I'm using this in service module. I also using INNER JOIN form diff DB of diff service module.

2019-04-09 00-57-55
carl ruhle

Hi Jordan,

from what I could understand it is a defence against SQL Injection, but it is built taking on account the platform DB type/version. It may not work as expected with a different DB, I know that this doesn't sound write, but I would bet on that. 

Regards 

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

Hi Jordan,

I agree with what Carl writes, OutSystems can only control how this feature works on the database server (version) used by the OutSystems platform. That doesn't mean you cannot use the feature persé, but you need to pay more attention to it and make sure it works as expected.

Regards,

Dnaiel

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.