Hi,

A security third party was testing SQL injection.

They add quote in the app path as follow
GET /ibi_apps/WFServlet?IBIF_ex=get_party&IBIAPP_app=lin_common='

by sending this url, WF returned

(FOC224) SYNTAX ERROR: PREPENDPATH lin_common='
(FOC324) THE PARAMETER TO BE SET IS NOT RECOGNIZED
ERROR AT OR LINE 13 IN PRECEDURE get_party

Q1.Is it possible to add this SET EMGSRV=OFF
at the start up in the customer profile.
Q2. If the path is wrong how can i reveived a error that come from the procedure. The procedure shouldn't be executed ?

WF v7.7.003

Thanks,
Pierre

This message has been edited. Last edited by: <Kathryn Henning>,

Hi Pedro,

I see that you've opened a case and have been working with Customer Support on this issue. Once the Symptom-Problem-Solution document has been published, I'll come back and update this topic with the link.

Thanks and regards,

Kathryn