Back to Devexpress

CustomQueryValidator Class

corelibraries-devexpress-dot-dataaccess-dot-wizard-dot-services-adaf2a9b.md

latest2.2 KB
Original Source

CustomQueryValidator Class

A default implementation of the ICustomQueryValidator interface that provides custom validation logic for SQL queries.

Namespace : DevExpress.DataAccess.Wizard.Services

Assembly : DevExpress.DataAccess.v25.2.dll

NuGet Package : DevExpress.DataAccess

Declaration

csharp
public class CustomQueryValidator :
    ICustomQueryValidator
vb
Public Class CustomQueryValidator
    Implements ICustomQueryValidator

Remarks

The default query validation mechanism only allows an end-user to specify custom SQL queries containing ‘SELECT’ statements.

Important

Although the default validation mechanism only allows custom queries containing SELECT statements (except for SELECT INTO clauses), it cannot be considered safe as it does not prevent execution of potentially harmful requests. For this reason, we strongly recommend that you implement your own validation logic that does not reduce the default restrictions and permits only execution of specific query kinds.

Implements

ICustomQueryValidator

Inheritance

Object CustomQueryValidator

See Also

CustomQueryValidator Members

ICustomQueryValidator

Custom SQL Query in the Report Designer for Web

Custom SQL Query Validation (Web)

DevExpress.DataAccess.Wizard.Services Namespace