sc_sql_injection({My_Field}) or ($My_Variable)

This macro is used to protect the field/variable against "SQL injection" attempts.

Macro used for protection against "SQL injection" in commands generated by the developer when using the macros: sc_lookup, sc_select, or sc_exec_sql.


Ex. 1: Protecting a local variable:
$field_protect = sc_sql_injection({my_field});


Ex. 2: Protecting an user variable:
$field_protect = sc_sql_injection($my_var);

 

Note: that all database accesses, generated for the Scriptcase, have protection against "sql injection".