new javascript support for T5

2013-01-02 Thread nhhockeyplayer nashua
Folks, Any idea when the new javascript support will be available for T5? Can wait to try it out. Best regards and thanks... KEN

automated layouts component

2013-01-02 Thread nhhockeyplayer nashua
Folks, Is there a dynamic automated layouts component available? Something that can be configured to support multiple layouts and a dynamic runtime switch to toggle top of menubar or something like that? Tired of having to struggle with infrastructure instead of focusing on the meat of a true

Re: protecting text field components from SQL injection

2013-01-02 Thread Michael Prescott
SQL injection vulnerabilities occur when you build SQL strings manually through string concatenation, like this: String sqlStatement = "SELECT ID FROM MYTABLE WHERE TEXTFIELD LIKE '%" + queryFromUser + "%';"; The simplest way, IMO, to protect against SQL injection attacks is to not do this. Usin

Re: protecting text field components from SQL injection

2013-01-02 Thread Alex Kotchnev
John - trying to protect against SQL injection by black listing possible SQL reserved words is not a good approach for preventing sql injection. The proper way to deal with that is to not use string concatenation (using the content of your text field) for your queries, and use prepared statements t

protecting text field components from SQL injection

2013-01-02 Thread John
Hi, Has anyone any knowledge of this topic? I'd like to ensure that any of my text input fields can block any use of SQL reserved words. Would a validator be a suitable approach? happy new year, John