org.geotools.jdbc
Class EscapeSql

Object
  extended by EscapeSql

public class EscapeSql
extends Object

Perform basic SQL validation on input string. This is to allow safe encoding of parameters that must contain quotes, while still protecting users from SQL injection. We prevent SQL from breaking out of quotes by replacing any quotes in input stream with double quotes. Backslashes are too risky to allow so are removed completely


Constructor Summary
EscapeSql()
           
 
Method Summary
static String escapeSql(String str)
           
 
Methods inherited from class Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

EscapeSql

public EscapeSql()
Method Detail

escapeSql

public static String escapeSql(String str)


Copyright © 1996-2014 Geotools. All Rights Reserved.