--- a/Framework/MySQL/MySQLParameters.cpp	Wed Jul 11 14:39:59 2018 +0200
+++ b/Framework/MySQL/MySQLParameters.cpp	Thu Jul 12 10:44:17 2018 +0200
@@ -104,6 +104,22 @@
   
   void MySQLParameters::SetDatabase(const std::string& database)
   {
+    if (database.empty())
+    {
+      LOG(ERROR) << "Empty database name";
+      throw Orthanc::OrthancException(Orthanc::ErrorCode_ParameterOutOfRange);
+    }
+    
+    for (size_t i = 0; i < database.length(); i++)
+    {
+      if (!isalnum(database [i]))
+      {
+        LOG(ERROR) << "Only alphanumeric characters are allowed in a "
+                   << "MySQL database name: \"" << database << "\"";
+        throw Orthanc::OrthancException(Orthanc::ErrorCode_ParameterOutOfRange);          
+      }
+    }
+    
     database_ = database;
   }