2019 Feb 28 1:19 PM
Hi all,
Is there any possibility that anyone can make a SQL injection on the below program? I think there is no way someone can make an injection by changing the parameter text. Any answer will be appreciated.
Thanks in advanced.
Parameters: P_CHAR TYPE CHAR50.
SELECT * SINGLE FROM PA_XYZ INTO @DATA(LV_XYZ) WHERE BLA = P_CHAR.
Hi all,
Is there any possibility that anyone can make a SQL injection on the below program? I think there is no way someone can make an injection by changing the parameter text. Any answer will be appreciated.
Thanks in advanced.
Parameters: P_CHAR TYPE CHAR50.
SELECT * SINGLE FROM PA_XYZ INTO @DATA(LV_XYZ) WHERE BLA = P_CHAR.
| User | Count |
|---|---|
| 6 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |