Azure Cosmos DB SQL 赞，准备好的语句

Question

Azure Cosmos DB SQL Like API 是否提供等效的准备好的语句来避免 SQL 注入？快速入门示例未涵盖该内容，我似乎找不到关于该主题的文档。

Answer 1

如果我没看错你只需要使用SDK方法即可call the query with parameters。

{
    "query": "SELECT * FROM Families f WHERE f.lastName = @lastName AND f.address.state = @addressState",
    "parameters": [
        {"name": "@lastName", "value": "Wakefield"},
        {"name": "@addressState", "value": "NY"},
    ]
}

或者您可能在谈论 stored procedures？

Azure Cosmos DB SQL 赞，准备好的语句

Azure Cosmos DB SQL Like, prepared statements

azure

azure-cosmosdb-sqlapi