Rule Definition
One main source of data corruption within applications comes from lack of compliance to data modification rules defined for an application. These rules are usually related to the use of specific procedures for update/insert/delete, a specific API or a data layer that is fully tested to maintain data integrity. The creation of new, different update/insert/delete procedures and functions that do not make use the existing tested code is at origin of many data corruption cases.
Remediation
Try to reduce the sources having data deletion on the same table.
Violation Code Sample
delete CAST;
delete CAST; with
#sql{
delete from TEST1 L1
where TEST_ID= :CAST.L1
};
execute delete for CAST;
DML syntax NOT supported for delete statements :
execute
#sql{
delete from CAST L1
where TEST_ID= :CAST.L1
};
stringExpression String= "delete from " +
CAST L1 "+ "where "+ "L1= ?";
prepare preparedStatementIdentifier from stringExpression;
execute preparedStatementIdentifier
using CAST.L1;
Reference
Standard suggestions based on CAST Quality Model
Related Technologies
Technical Criterion
CWE-1060 - Excessive Number of Inefficient Server-Side Data Accesses
About CAST Appmarq
CAST Appmarq is by far the biggest repository of data about real IT systems. It's built on thousands of analyzed applications, made of 35 different technologies, by over 300 business organizations across major verticals. It provides IT Leaders with factual key analytics to let them know if their applications are on track.