Appian Community
Site
Search
Sign In/Register
Site
Search
User
DISCUSS
LEARN
SUCCESS
SUPPORT
Documentation
AppMarket
More
Cancel
I'm looking for ...
State
Verified Answer
+3
person also asked this
people also asked this
Replies
14 replies
Subscribers
11 subscribers
Views
11884 views
Users
0 members are here
Share
More
Cancel
Related Discussions
Home
»
Discussions
»
Administration
Security Attacks in Appian
sachitanands1
over 7 years ago
Are Appian Applications vulnerable to SQL Injection and Cross site scripting attacks? Yes/No why?
OriginalPostID-263116
Discussion posts and replies are publicly visible
Top Replies
Parmida Borhani
over 7 years ago
in reply to
garym
+2
verified
Appian Employee
SQL injection protection is more about how you interact with the database than with how you collect data in a form. Whenever you interact with a database using Appian's out-of-the-box database functionality…
Parents
0
nathan.schmitz
Certified Associate Developer
over 7 years ago
I echo the above but would add that it is certainly possible to enable sql injection using some of the plugins and undocumented expressions in Appian.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
0
garym
over 7 years ago
in reply to
nathan.schmitz
Hi,
Is it possible for sql injection just on a text box? If so, should we putting in validations on these text boxes to look for certain strings?
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
0
andriyr
over 7 years ago
in reply to
garym
My understanding is that Appian protects against SQL injection on text boxes under the hood to prevent that kind of thing.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
Reply
0
andriyr
over 7 years ago
in reply to
garym
My understanding is that Appian protects against SQL injection on text boxes under the hood to prevent that kind of thing.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
Children
0
garym
over 7 years ago
in reply to
andriyr
@andriyr - Do you have any documentation that says that Appian protects against SQL injection?
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel