This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SUPPORT Q&A - Is SQL itemtype in ARAS against SQL injection?

Rekha - Friday, January 3, 2014 12:29 PM:

Hi,

It is suggested by ARAS support earlier to use stored procedure while updating a context item instead of applySQL and AML also does not work in this case.

I have created a SQL which has the stored procedure in it and updates a table in the database.

I am calling this SQL in my C# method.  I would like to know if this ARAS SQL protects against SQL injection just like the technique of parameterising a SQL query in an usual C# method?

Request you to help at the earliest.

Regards

Rekha