[jbosscache-issues] [JBoss JIRA] Created: (JBCACHE-1461) Possible problems with SQL metacharacters in JDBCCacheLoader

Wed Jan 7 08:50:05 EST 2009

Possible problems with SQL metacharacters in JDBCCacheLoader
------------------------------------------------------------

                 Key: JBCACHE-1461
                 URL: https://jira.jboss.org/jira/browse/JBCACHE-1461
             Project: JBoss Cache
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: 3.0.2.CR1, 2.2.1.CR1
            Reporter: Krzysztof Sobolewski
            Assignee: Manik Surtani

JDBCCacheLoader uses queries with LIKE operator, but passes search patterns constructed from query parameters without concern for metacharacters like '%' and '_'. A quick test can show the problem:

add /a/b/c
add /a/d/c
remove /a/_/c
find the cache is empty.

Fortunately the problem is apparently limited to deleteNodeSql and recursiveChildrenSql, both in JDBCCacheLoaderConfig (and not in AdjListJDBCCacheLoaderConfig).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira