Products
In-IDE
IDE extension that lets you fix coding issues before they exist!
Discover SonarQube for IDE
SaaS
Setup is effortless and analysis is automatic for most languages
Discover SonarQube Cloud
Self-Hosted
Fast, accurate analysis; enterprise scalability
Discover SonarQube Server

Secrets
ABAP
Ansible
Apex
AzureResourceManager
C
C#
C++
CloudFormation
COBOL
CSS
Dart
Docker
Flex
Go
HTML
Java
JavaScript
JCL
Kotlin
Kubernetes
Objective C
PHP
PL/I
PL/SQL
Python
RPG
Ruby
Scala
Swift
Terraform
Text
TypeScript
T-SQL
VB.NET
VB6
XML

ABAP static code analysis

Unique rules to find Bugs, Vulnerabilities, Security Hotspots, and Code Smells in your ABAP code

Filtered: 23 rules found

sql

Impact

Clean code attribute

SQL "UPDATE dbtab SET ..." statements should have a "WHERE" clause
Bug
"DELETE FROM dbtab" statements should have a "WHERE" clause
Bug
Having dynamic clauses for SQL "SELECT" statements is security-sensitive
Security Hotspot
"LIKE" clauses should not be used without wildcards
Code Smell
"WHERE" clause conditions should not be contradictory
Bug
Having SQL "SELECT" statements without "WHERE" conditions is security-sensitive
Security Hotspot
"JOIN" should be used instead of nested "SELECT" statements
Code Smell
"SELECT INTO TABLE" should be used
Code Smell
"EXIT" and "CHECK" statements should not be used in "SELECT" loops
Code Smell
SQL "LIKE" clauses should not start with wildcard characters
Code Smell
A SQL "SELECT" statement should not involve too many tables
Code Smell
Native SQL should not be statically embedded
Code Smell
To "SELECT", "INSERT" or "DELETE" several lines in databases, internal tables should be used in place of loop control structure
Code Smell
SQL "DISTINCT" operator should not be used to prevent bypassing the SAP buffering
Code Smell
Columns to be read with a "SELECT" statement should be clearly defined
Code Smell
Subqueries and "JOIN" clauses should not be used
Code Smell
SQL EXISTS subqueries should not be used
Code Smell
SQL "BYPASSING BUFFER" clause should not be used
Bug
SQL aggregate functions should not be used to prevent bypassing the SAP buffer
Code Smell
Empty driver tables should not be used in a "SELECT/FOR ALL ENTRIES" clause
Bug
Duplications in driver tables should deleted before the tables are used
Code Smell
The "LIKE" operator should be used very carefully in SQL "WHERE" condition
Code Smell
Open SQL "SELECT" statements should have an "ORDER BY" clause
Bug

SQL "UPDATE dbtab SET ..." statements should have a "WHERE" clause

intentionality - complete

reliability

Bug

BlockerSonarSource default severity
click to learn more

Why is this an issue?

UPDATE dbtab SET ... without a WHERE condition changes all the entries of the table. Check whether dataset to be changed can be limited by a suitable WHERE condition.

Noncompliant code example

UPDATE COUNTRIES SET NAME=country_name.

Compliant solution

UPDATE COUNTRIES SET NAME=country_name WHERE CODE=country_code.

Available In:

Catch issues on the fly,
in your IDE

Detect issues in your GitHub, Azure DevOps Services, Bitbucket Cloud, GitLab repositories

Developer
Edition

© 2008-2024 SonarSource SA. All rights reserved. SONAR, SONARSOURCE, SONARQUBE, and CLEAN AS YOU CODE are trademarks of SonarSource SA.

Sonar helps developers write Clean Code.
Privacy Policy | Cookie Policy

In-IDE

SaaS

Self-Hosted