SqlSecurityHelper Class

Security methods for SQL queries

Inheritance Hierarchy

System.Object
  CMS.DataEngine.SqlSecurityHelper

Namespace: CMS.DataEngine
Assembly: CMS.DataEngine (in CMS.DataEngine.dll) Version: 12.0.0

Syntax

public static class SqlSecurityHelper

The SqlSecurityHelper type exposes the following members.

Properties

	Name	Description
Public property Static member	ColumnsRegex	Regular expression to check security of COLUMNS clause.
Public property Static member	OrderByRegex	Regular expression to check security of ORDER BY clause.
Public property Static member	WhereRegex	Regular expression to check security of WHERE clause.

Methods

	Name	Description
Public method Static member	CheckQuery	Checks part of a query (or whole query) for malicious code. Returns TRUE if query contains just a SELECT statement.
Public method Static member	GetColumnsRegEx	Gets the regular expression for the safe value of COLUMNS clause.
Public method Static member	GetOrderByRegEx	Gets the regular expression for the safe value of ORDER BY clause.
Public method Static member	GetWhereRegEx	Gets the regular expression for the safe value of WHERE condition.