# Session Custom Property datetime as Named Query Parameter

**URL:** <https://forum.inductiveautomation.com/t/session-custom-property-datetime-as-named-query-parameter/94735>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [August 16, 2024, 6:31am UTC](https://forum.inductiveautomation.com/t/session-custom-property-datetime-as-named-query-parameter/94735 "2024-08-16T06:31:40Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [August 17, 2024, 12:12am UTC](https://forum.inductiveautomation.com/t/session-custom-property-datetime-as-named-query-parameter/94735/5 "2024-08-17T00:12:44Z")

</div>

1. See [Wiki - how to post code on this forum](https://forum.inductiveautomation.com/t/wiki-how-to-post-code-on-this-forum/77831).
2. Don't create query strings using CONCAT(). You are leaving your system open to SQL injection attack. Ideally you would use [system.db.runNamedQuery | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/appendix/scripting-functions/system-db/system-db-runNamedQuery) or [system.db.runPrepQuery | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/appendix/scripting-functions/system-db/system-db-runPrepQuery).

---

_[View the full topic](https://forum.inductiveautomation.com/t/session-custom-property-datetime-as-named-query-parameter/94735)._
