Exception Log Error: "The Condition Expression cannot contain one of the SQL keywords: DELETE, SELECT, DROP, etc. Link Configuration ID: ###"

Application Scope: CORE

Problem

Exception log contains the error: "The Condition Expression cannot contain one of the SQL keywords: DELETE, SELECT, DROP, UPDATE, EXEC, EXECUTE, INSERT, ALTER or CREATE. Link Configuration ID: ###"

Cause

Link Display condition is configured with SQL Protected Word.  The underlying code has been designed to eliminate the possibility of SQL Injection, and so will throw an error if any of the words DELETE, SELECT, DROP, UPDATE, EXEC, EXECUTE, INSERT, ALTER or CREATE are used when configuring Link Condition Expressions.

Solution

Edit the Link Display Configuration conditions to remove the SQL Protected word, also remove the Protected word from the Condition Expression line so it matches the Display Configuration labels.

Example Display configuration:

Both the Label and the Condition Expression should avoid using the word SELECT in this example, so the Label and Condition Expression could be changed to BlueCrossSelPPO and this would avoid the error.

Related articles

Article Images: