Axapta.ExecuteStmt - Is it safe? [duplicate]
问题 This question already has answers here : Injection safe call to IAxaptaRecord.ExecuteStmt() (3 answers) Closed 6 years ago . I have some code, which uses the ExecuteStmt method on the Axapta Object when using the Business Connector, like so: AxaptaRecord record = (AxaptaRecord)ax.CreateAxaptaRecord("SalesTable"); record.ExecuteStmt("select * from %1 where %1.SalesId == '" + id + "'"); while (record.Found) { // do stuff } This works fine, but it's going to be on a public facing website, so is