Forum Post: RE: The Filter service parameter

Status
Not open for further replies.
E

egarcia

Guest
Hello Valeriy, The filter parameter is a free form string. In a Business Entity class, the filter parameter is generally assigned to the FILL-WHERE-STRING of the data source. This means that you could pass a WHERE clause with multiple parameters. However, I would prefer to pass the parameters in the string using different approach. Since just assigning the string would allow the client to pass parameters that you do not expect. You could pass the parameters in string separated by commas or even use JSON.stringify() on the JavaScript side and pass an object with the parameters as properties to the backend. Then in the backend, you would process the filter string and construct the FILL-WHERE-STRING. This would prevent someone from constructing a WHERE clause that you are not expecting. I hope this helps.

Continue reading...
 
Status
Not open for further replies.
Top