IBM Support

Special Characters in Guardium Query Conditions

Question & Answer


Question

I have previously been able to create use special characters in query conditions on the Guardium GUI but I am no longer able to do so as I receive this error message: ‘Invalid Query. Input fields cannot have special characters’ What special characters are allowed in Guardium query builder conditions?

Answer

Starting Version 10, if a Query Condition field is a number, Guardium does not allow the user inputs in the conditions for these special characters:

\ ' " ;

These are backslash, single quote. double quote and semicolon.

If the Query Condition Field is not a number, Guardium does not allow the user inputs in the conditions for these special characters:

\ '

These are backslash and single quote.



When any of these characters are used in a query condition, this error message will be shown and the condition cannot be saved:


The reason for this change is to:

· Increase security by preventing SQL injection


· Make sure that the saved query can run as expected

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22000903