c# - is nHibernates Expression.Sql Parameterised? -


as per title i'm wondering if expression.sql parameterised, avoid sql injection attacks?

example:

expression.sql("{alias}.column ?", $"%{stringvalue}%", nhibernateutil.string); 

i've been having trouble getting column stored string contains numbers, compare value string, contains numbers (i think nhibernateutil.guesstype might getting little eager use integers when generating statement, particular column doesnt honor matchmode.always result in wildcards, thats separate question day).

any feedback appreciated.


Comments

Popular posts from this blog

c - zlib and gdi32 with OpenSSL? -

java - inputmismatch exception -

ios - Align baselines with characters in large line heights with Text Kit -