Thank you for your comment. I just want to create text box , that allow admin, who work on state who can export CSV file but want him can query only partial of database and want the system flexible enough.
I think if when user send all query will be executed as HQL, so this can prevent SQL injection or prevent them from query over another table or field that not allowed. I hope you guys understand my idea. Thank you so much. -- You received this message because you are subscribed to the Google Groups "nhusers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/nhusers. For more options, visit https://groups.google.com/d/optout.
