‎2019 Feb 28 1:19 PM
Hi all,
Is there any possibility that anyone can make a SQL injection on the below program? I think there is no way someone can make an injection by changing the parameter text. Any answer will be appreciated.
Thanks in advanced.
Parameters: P_CHAR TYPE CHAR50.
SELECT * SINGLE FROM PA_XYZ INTO @DATA(LV_XYZ) WHERE BLA = P_CHAR.