What is purpose of the following sql statement part in a handful of DialogTableGroupRight
UpdateWhereClause and InsertWhereClause enties?
UpdateWhereClause like '%''%UserUID%'' > '' ''%' or
InsertWhereClause like '%''%UserUID%'' > '' ''%'
Example entry for DialogTableGroupRight: VI_4_ALLUSER - PersonHasESet
UpdateWhereClause = UID_ESet in (select UID_ESet from ESet where UID_PersonResponsible='%UserUID%' and '%UserUID%' > ' ')
Was this a legacy/previous way to prevent SQL injection?
Regards,
Niels