juddi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Viens" <svi...@attbi.com>
Subject RE: [juddi-Developers] [ juddi-Bugs-784297 ] dynamic sql escape special character bug
Date Wed, 06 Aug 2003 11:10:03 GMT
I'll take a look at this.

Steve

-----Original Message-----
From: juddi-developers-admin@lists.sourceforge.net
[mailto:juddi-developers-admin@lists.sourceforge.net] On Behalf Of
SourceForge.net
Sent: Wednesday, August 06, 2003 1:35 PM
To: noreply@sourceforge.net
Subject: [juddi-Developers] [ juddi-Bugs-784297 ] dynamic sql escape
special character bug


Bugs item #784297, was opened at 2003-08-06 13:35
Message generated for change (Tracker Item Submitted) made by Item
Submitter You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=434422&aid=784297&grou
p_id=42875

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Jin Tong (nij_gnot)
Assigned to: Nobody/Anonymous (nobody)
Summary: dynamic sql escape special character bug

Initial Comment:
In find_XXXXX methods, the SQLs are built dynamically
by appending to an existing buffer with new arguments.
SQL control characters are not properly escaped. For
example, if one string argument contains "'", the
resulting sql that is sent to the database will be
ill-formed and a resulting SQLException will usually be
thrown. This happens at least with MySQL and Oracle
database (and their default JDBC driver).


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=434422&aid=784297&grou
p_id=42875


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
juddi-developers mailing list juddi-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/juddi-developers




Mime
View raw message