Parameterised queries in entity framework

Question

I need a clarification, i went through different turorials on entity framework and implemented in my project.

Later when it came to security of application, i understood that parameterised queries are good for security.

My questions are :

Will entity framwork automatically take care of parameterised queries
If yes, where it is implemented?
Is it implemeneted in context class like below?

modelBuilder.Entity<TriggerEvent>().HasKey(c => c.TriggerEventId)
            .HasIndex("IX_TriggerEvent_LegacyName", IndexOptions.Unique,
                        e => e.Property(x => x.LegacyName))
            .Map(m =>
            {
                  m.MapInheritedProperties();
                  m.ToTable("refTriggerEvent", schemaName: "CaseManagement");
            });

erm... Linq to Entities doesn't use parameterised queries... Entity SQL can... Query builder method can (using ObjectQuery)... executing raw SQL is the real issue of parameters being dangerous... EF will perform datatype matching to a greater extent (not sure exactly where it does it though).. your code defines part of your model... it is not a parameterised query. — BLoB
– BLoB, Commented Oct 20, 2015 at 10:39
This may prove interesting to you... msdn.microsoft.com/en-us/library/vstudio/… — BLoB
– BLoB, Commented Oct 20, 2015 at 10:42

Richard · Accepted Answer · 2015-10-20 10:38:21Z

3

Will entity framwork automatically take care of parameterised queries

Yes.

If yes, where it is implemented?

EF is open source, you could trawl through the implementation.

Is it implemeneted in context class like below?

That code is defining (part of) the model. There is no query to parametrise.

If you configure logging (DbConext.Database.Log property) you can see the SQL and parameters being passed to the database.

answered Oct 20, 2015 at 10:38

Richard

110k21 gold badges214 silver badges279 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Parameterised queries in entity framework

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related