Title |
Test
Find
TSQL identifier
|
Expression |
(?:\[(?:[\u0000-\u005C]|[\u005E-\uFFFF]|\]\])+\])|(?:\u0022(?:[\u0000-\u0021]|[\u0023-\uFFFF]|\u0022\u0022)+\u0022)|(?:[a-zA-Z_][a-zA-Z0-9_]*) |
Description |
Pattern for T-SQL identifier |
Matches |
[hjhhh] [gg]]] "hhh" "hh""" |
Non-Matches |
1wqqq |
Author |
Rating:
Not yet rated.
Vasiliy Fofanov
|
Source |
|
Your Rating |
|
Title: Allows injection?
Name: Jon
Date: 9/3/2007 1:59:53 AM
Comment:
I was looking for something to prevent injection but this matches [User;SELECT * FROM TEST;]