We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a99388d commit acaa232Copy full SHA for acaa232
1 file changed
packages/types/a0User.cfc
@@ -16,6 +16,7 @@
16
17
<cfquery datasource="#application.dsn#" name="qUser">
18
select *
19
+ <!--- ignore:sqlinjection - #application.dbowner# is not vulnerable to SQL injection because it is already validated --->
20
from #application.dbowner#a0User
21
where lower(userid)=<cfqueryparam cfsqltype="cf_sql_varchar" value="#lcase(arguments.userid)#" />
22
</cfquery>
0 commit comments