search

chrooter / bkitpoma

Automatically exported from code.google.com/p/bkitpoma
0 stars 0 forks source link

Prevent SQL Injection cause database update wrong #10

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
When update an entity using DatabaseServiceImpl, all field of entity be
checkd by preventSQLInj function.

preventSQLInj will assign empty string to a null field of entity. It cause
database update wrong (change any string field to empty string although you
don't want to do it). Because all update operation of DatabaseServiceImpl
are only update non-null field of parameter entity.

Original issue reported on code.google.com by rockerh...@gmail.com on 2 Sep 2009 at 6:13