parameter-spoofing

Parameter Sniffing (or Spoofing) in SQL Server

A while ago I had a query that I ran quite a lot for one of my users. It was still being evolved and tweaked but eventually it stablised and ran quite quickly, so we created a stored procedure from it. So far, so normal. The stored procedure, though, was dog slow. No material difference between the query and the proc, but the speed c...

Are selectOne and selectMany choices bounded by SelectItems?

Do the JSF selectOne and selectMany controls only allow submission of values defined in the given selectItems? I'm concerned about parameter spoofing, and if this was built-in, I wouldn't require a validator to ensure the selected value was one of the valid choices. ...