[bdbxml] Security in XML Database

Hi,

I'm writing a web application with PHP and DBXML and I wonder how secure
it is.

I have 2 kinds of user input:
- keywords, used in the "where" clause of XQueries
- XML documents from different sources, which are Schema validated and
then put into the container

I use $Context->setVariableValue to insert the user input into the XQueries.

The data in the database isn't secret and XQuery can't change the
database, so I think the only real problem could be the XML documents.

Are there any security risks by this? Can something similar to an SQL
injection happen? How do you secure your database?

Thank you,
  Tobias Neumann




------------------------------------------
To remove yourself from this list, send an
email to [email protected]