cocoon-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bertrand Delacretaz <bdelacre...@apache.org>
Subject Re: use-request-parameters SQL Transformer
Date Mon, 25 Apr 2005 16:19:14 GMT
Le 25 avr. 05, à 18:11, Volker Bublitz a écrit :

> ...public class RequestParameterSQLTransformer extends SQLTransformer {
>     public void setup(SourceResolver resolver, Map objectModel, String 
> source,
> ...        boolean useParameters = 
> parameters.getParameterAsBoolean("use-request-parameters", false);..

Another way would have been to use the RequestGenerator, and use the 
request parameters when building the SQL.
Or use-request-parameters on an XSLT transform upstream from the 
SQLTransformer.

But your solution certainly works, you just have to be careful about 
potential SQL injection risks depending on how you use the request 
parameters.

-Bertrand

Mime
View raw message