RPG 和 CL 中安全编码的良好资源（iSeries 开发）
我只是想知道是否有人可以向我指出 RPG 和 CL 的安全编码资源。 （iSeries 中的角色扮演游戏，而不是角色扮演游戏）。
我可以毫不费力地找到涵盖通用安全编码指南的资源，这些资源非常好。我还可以找到针对 .NET、Java 或几乎任何其他现代语言的具体指南，其中涵盖了特定语言的最佳实践。 （例如，.NET 中验证控件的正确使用等）但是，我似乎找不到任何专门针对 RPG 编程的好资源。
我这么问是因为我来自一个混合环境，其中 .NET 代码经常调用 iSeries 代码。大多数情况下，iSeries 代码采用 RPG 或 CL 程序“包装”的形式，使其看起来像存储过程。我正在为整个团队编写安全编码实践文档和策略，但无法为我们的 iSeries 开发人员找到好的资源，即使在 IBM 站点上也是如此。
我希望一两个经验丰富的 iSeries 开发人员能给我指出有关该主题的好文章或红皮书。
编辑
我可能看错了。我还对有关 DB2 安全性以及操作系统提供的安全性的文档感兴趣。
I'm just wondering if anyone can point me for secure coding resources for RPG and CL. (RPG as in for the iSeries, not Role Playing Games).
I have no problem finding resources that cover secure coding guidelines that are generic, which are very good to have. I can also find specific guidelines for .NET, Java, or almost any other modern language that cover best practices for the specific language. (For example, the proper use of validation controls in .NET, etc) However, I can't seem to find any good resources specific to RPG programming.
I'm asking because I come from a mixed environment where .NET code regularly calls iSeries code. Most often, the iSeries code is in the form of RPG or CL programs "wrapped" to look like stored procedures. I'm working on secure coding practices documentation and policies for the entire team, and am unable to find good resources for our iSeries developers, even on the IBM site.
I'm hoping an experienced iSeries developer or two can point me to good articles, or redbooks on the subject.
Edit
I may be looking at this wrong. I would also be interested in documentaiton on DB2 security, as well as security provided by the OS.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
一般 SQL 安全实践也适用于 iSeries 上的 DB2（注入保护等），其中包括 RPG 程序中的嵌入式 SQL。
这是 iSeries Security 红皮书
这是 IBM V5R4 的 iSeries 安全文档和参考
谁知道你可以用 RPG IV 做到这一点 是一本很棒的红皮书，但它并不是专门针对安全性的。
General SQL secure practices also apply to DB2 on the iSeries (injection protection and such) which includes embedded SQL in RPG programs.
This is a Redbook for iSeries Security
This is IBM's iSeries security documentation and references for V5R4
Who knew you could do that with RPG IV is a great Redbook but it's not specific to security.
提出这个问题的另一个来源是 RPG-L 或 WEB400，位于 midrange.com。他们还有一个安全列表，可以提供更具体问题的答案。
我不能说我在休闲搜索中遇到过任何关于此类安全性的资源，尽管我确信有很多人在为网络写作，有一些最佳实践。人们在
Another source to ask this question would be the RPG-L or WEB400 at midrange.com. They also have a security list that may offer answers to more specific questions.
I can't say I have come across any resources in my casual searches on that type of security though I am sure with as many people that there are writing for the web, there has be some best practices. The people on