Ticket #1668 (new 改善提案) — at Version 1

Opened 12 years ago

Last modified 11 years ago

SQL 文に定数を直接記述しない

Reported by: Seasoft Owned by: somebody
Priority: 中 Milestone: EC-CUBE2.12.0
Component: その他 Version: 2.12.0 α
Keywords: Cc:
修正済み: no

Description (last modified by Seasoft) (diff)

プレースホルダーを利用する。

  • 脆弱性リスクを軽減する。
  • SQL 文の変換不具合を軽減する。

Change History

comment:1 Changed 12 years ago by Seasoft

  • Description modified (diff)
Note: See TracTickets for help on using tickets.