SQL Connector are things escaped?

Questions
1

Are SQL queries escaped to prevent SQL injection attacks?

Thanks

2

I assume you mean the parameter values?

Possibly the parameters use binding, which prevents this attack, but I’m not certain.

I’d be interested in seeing results of your testing : )

3

Hi Mishav,

Yep that probably means its all escaped then! I’l have to do some testing and ill report back.

4

Did you ever test this vulnerability?