---
title: Enabling security enhancement in JDBC datastore queries
description: Edit the org.sourceid.common.SqlFilterManager.xml file for stronger security protection in a JDBC datastore.
component: pingfederate
version: 13.1
page_id: pingfederate:upgrading_pingfederate:pf_secur_enhance_jdbc_datastore_queries
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/upgrading_pingfederate/pf_secur_enhance_jdbc_datastore_queries.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 20, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
---

# Enabling security enhancement in JDBC datastore queries

Edit the `org.sourceid.common.SqlFilterManager.xml` file for stronger security protection in a JDBC datastore.

## About this task

|   |                                                                                                                                                                                                                                                                          |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|   | If you are upgrading from PingFederate 8.4.4 or earlier, modify the `<pf_install>/pingfederate/server/default/data/config-store/org.sourceid.common.SqlFilterManager.xml` file to enable the safeguard for JDBC datastore queries against backend SQL injection attacks. |

## Steps

1. Edit the `org.sourceid.common.SqlFilterManager.xml` file.

2. Set the `<item name="enableSqlFilters"/>` element value to `true`.

   ### Example:

   ```xml
   <?xml version="1.0" encoding="UTF-8"?>
   <config xmlns="http://www.sourceid.org/2004/05/config">
       <item name="enableSqlFilters">true</item>
   </config>
   ```

3. Save the file.

4. Restart PingFederate.

5. If you have a clustered PingFederate environment, push this change to all engine nodes:

   1. On the administrative console, go to **System > Server > Cluster Management**.

   2. Click **Replicate**.

6. Verify your use cases to make sure your search filters return the expected results.