https://community.sap.com/t5/application-development-and-automation-discussions/abap-sql-injection/m-p/758843#M36818 <P>Hi all,</P> <P>Is there any possibility that anyone can make a SQL injection on the below program? I think there is no way someone can make an injection by changing the parameter text. Any answer will be appreciated.</P> <P>Thanks in advanced.</P> <P>Parameters: P_CHAR TYPE CHAR50.</P> <P>SELECT * SINGLE FROM PA_XYZ INTO @DATA(LV_XYZ) WHERE BLA = P_CHAR.</P> Thu, 28 Feb 2019 13:19:49 GMT former_member538256 2019-02-28T13:19:49Z https://community.sap.com/t5/application-development-and-automation-discussions/abap-sql-injection/m-p/758843#M36818 <P>Hi all,</P> <P>Is there any possibility that anyone can make a SQL injection on the below program? I think there is no way someone can make an injection by changing the parameter text. Any answer will be appreciated.</P> <P>Thanks in advanced.</P> <P>Parameters: P_CHAR TYPE CHAR50.</P> <P>SELECT * SINGLE FROM PA_XYZ INTO @DATA(LV_XYZ) WHERE BLA = P_CHAR.</P> Thu, 28 Feb 2019 13:19:49 GMT https://community.sap.com/t5/application-development-and-automation-discussions/abap-sql-injection/m-p/758843#M36818 former_member538256 2019-02-28T13:19:49Z