> I will address a point that has not really been raised before about clause 11 and names containing computer code. [..] My understanding is that the clause is to guard against SQL injection into the Companies House register, because anyone pulling that out of the register can have their systems corrupted by companies that register with computer code.
> [..] A company has been registered [..] under the name ; DROP TABLE "COMPANIES";-- LTD, which has some computer code around it.
As the post above points out, this would either work fine or cause an error, because of the quotes -- it's not actually SQL injection.
In theory, a system could have an actual vulnerability but if it does it would mean it's also going to fail on any name with a single or double quote in it (depending on the SQL dialect). Not sure why anyone would legislate a workaround to what is essentially a "intro to databases" level programming bug.
> [..] A company has been registered [..] under the name ; DROP TABLE "COMPANIES";-- LTD, which has some computer code around it.
As the post above points out, this would either work fine or cause an error, because of the quotes -- it's not actually SQL injection.
In theory, a system could have an actual vulnerability but if it does it would mean it's also going to fail on any name with a single or double quote in it (depending on the SQL dialect). Not sure why anyone would legislate a workaround to what is essentially a "intro to databases" level programming bug.