Rule Definition
Direct access to database Table prevents the control at the database level of accesses. E.g.: use of non-optimized query against the database.
Remediation
Create one or several dedicated modules to access database. Encapsulate in these modules the object storing pool of connections
Violation Code Sample
tx.executeSql(str, [], function(tx, rs) { callback(result); });
Reference
CISQ rule: ASCPEM-PRF-9.
Related Technologies
Technical Criterion
CWE-1060 - Excessive Number of Inefficient Server-Side Data Accesses
About CAST Appmarq
CAST Appmarq is by far the biggest repository of data about real IT systems. It's built on thousands of analyzed applications, made of 35 different technologies, by over 300 business organizations across major verticals. It provides IT Leaders with factual key analytics to let them know if their applications are on track.