rspec/rules/S1493/description.adoc

There are two main reasons to ban dynamic clauses in ``++SELECT++`` statements. 


The first relates to maintainability. One of the nice features of ABAP Design Time is the connection to the data dictionary; you get syntax errors if you try to address table fields that are not present anymore or that have typos. With dynamic SQL, the ability to statically check the code for this type of error is lost. 


The other more critical reason relates to security. By definition, dynamic clauses make an application susceptible to SQL injection attacks.
make in-line code blocks verbatim 2021-01-27 13:42:22 +01:00			There are two main reasons to ban dynamic clauses in ``++SELECT++`` statements.
Add rules 1000-1999 2020-06-30 12:47:33 +02:00
Force linebreaks 2021-02-02 15:02:10 +01:00
Add rules 1000-1999 2020-06-30 12:47:33 +02:00			`The first relates to maintainability. One of the nice features of ABAP Design Time is the connection to the data dictionary; you get syntax errors if you try to address table fields that are not present anymore or that have typos. With dynamic SQL, the ability to statically check the code for this type of error is lost.`

Force linebreaks 2021-02-02 15:02:10 +01:00
Add rules 1000-1999 2020-06-30 12:47:33 +02:00			`The other more critical reason relates to security. By definition, dynamic clauses make an application susceptible to SQL injection attacks.`