title: SAP SAVE_TEXT function module is that secure against SQL Injection?
body: <p>I have question regarding <a href="/questions/tagged/abap" class="post-tag" title="show questions tagged 'abap'" rel="tag">abap</a> function module <strong>SAVE_TEXT</strong>. I assume that it is possible to create custom <code>tdobject</code> and <code>tdid</code>, then the longtextes are to be stored in the tables <code>STXH, STX</code>L. How secure is the <strong>SAVE_TEXT</strong> against <code>SQL</code> injection attacks? Is it not vulnerable because of encoding the textes in RAW format?</p>