How would you go through "> =" in the query string?

Question

I would like to pass some statements through querystring parameters so that I can convert them along with the value into an SQL query. The idea would be to let querystring dictate the page to return search results where prices are equal, greater or equal, greater, less or less, or equal:

=, >=, >, < and <=

I'm not sure that the best practice for passing these operators through can anyone help me? Do you pass through ascii codes or just text, for example e, gte, gt, lt, lte, and then convert them to the results page that builds the query?

Thanks guys!

Answer 1

Kon, HttpServerUtility.UrlEncode. - , , Server.UrlEncode.

SQL injection aka Bobby:

()

Answer 2

Server.UrlEncode

Answer 3

URL - , . Web.Utils. http://msdn.microsoft.com/en-us/library/system.web.util.httpencoder.aspx

Answer 4

eq, ne, gt, lt, ge, le, sa, eb, ap,

• GET []/? = 20
• []/? = GT 90

You can find more information on these sites: https://www.hl7.org/fhir/stu3/search.html#number https://www.hl7.org/fhir/stu3/search.html#prefix.