Home > Configuration > Application Firewall > setappfwprofile_sqlinjectiontransformspecialchars

setappfwprofile_sqlinjectiontransformspecialchars

Use this method to set transform injected SQL code. This setting configures the application firewall to disable SQL special strings instead of blocking the request. Since most SQL servers require a special string to activate an SQL keyword, in most cases a request that contains injected SQL code is safe if special strings are disabled.
CAUTION: Make sure that this parameter is set to ON if you are configuring any SQL injection transformations. If it is set to OFF, no SQL injection transformations are performed regardless of any other settings.

Syntax



Parameters

name

Name of the profile that you want to modify.
This is mandatory parameter.

sqlinjectiontransformspecialchars

Transform injected SQL code. This setting configures the application firewall to disable SQL special strings instead of blocking the request. Since most SQL servers require a special string to activate an SQL keyword, in most cases a request that contains injected SQL code is safe if special strings are disabled. CAUTION: Make sure that this parameter is set to ON if you are configuring any SQL injection transformations. If it is set to OFF, no SQL injection transformations are performed regardless of any other settings.
Possible Values : ON, OFF.

Return Value

Returns simpleResult

See Also