If data returned by CreateODBCDate is being used in SQL queries, should I sanitize the returned value or is that not necessary? Here’s the official documentation.
If data returned by CreateODBCDate is being used in SQL queries, should I sanitize
Share
No sanitation needed for CreateODBCDate, but make use of
<cfqueryparam>and take advantage of both security (built-in validation) and performance (prepared statement) for free would be a smart thing to do.