| # | Requirements Specification | # | All References | Document Section |
| REQ-001 |
This is a first requirement (controlled paragraph with ID equal to "REQ-001"). |
ARCH-004 |
This is an architecture item that is related to requirement "REQ-001". |
2 System Overview |
| REQ-002 |
This is a second requirement. |
ARCH-005 |
This is an architecture irem that is related to requirement "REQ-002". |
3 System Decomposition |
| REQ-010 |
The software shall pass every user-supplied value to the database exclusively as a bound parameter of a prepared statement. |
|
|
|
| REQ-011 |
The software shall not compose any SQL statement text by concatenating or interpolating user-supplied input. |
|
|
|
| REQ-012 |
When user input contains SQL metacharacters or injection payloads, the software shall treat the input as literal data and shall return only the results matching that literal value, without raising a database error. |
|
|
|