News and Announcements icon

Dynamics 365 CommunityForums Microsoft Dynamics CRM (Archived) Fetch XML - prevent sq...

Microsoft Dynamics CRM (Archived)

Fetch XML - prevent sql injection

(0) Share

Report

Report

Posted on by Community Member Microsoft Employee

Hello

I am generating fetch xml queries in my server side code

I want to escape characters for <filter condition="like"...>

What should I do?

*This post is locked for comments

All responses Img

All responses (2)

Answers Img

Answers (0)

Suggested answer

LuHao 40,872 on at

Like (0)

Report
RE: Fetch XML - prevent sql injection

Hi Amir,

Could you provide your question background?

<filter condition="like"...>

can be converted into

WHERE column_name LIKE ...

Hope this helps.

Best Regards,

Lu Hao
Suggested answer

gdas 50,085 on at

Like (0)

Report

RE: Fetch XML - prevent sql injection

Hi Amir,

Can you please elaborate what is your requirement ? why you want to escape those characters ? Normally FetchXML are executed by internal dynamics CRM request method , so for me you don't need to worry about SQL injection in Dynamics CRM.

Helpful resources

Quick Links

Leaderboard

#1

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2

Martin Dráb 230,214 Most Valuable Professional

#3

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans