/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

16 votes220 views3 answers
Tsql rename column name
SQL
2 votes234 views3 answers
Sql interview query questions
SQL
0 vote215 views1 answer
Docker open terminal mysql server
SQL
0 vote208 views1 answer
Allow all local clients (local socket connections) to connect to the kodekloud_db1
SQL
7 votes224 views1 answer
Sql disable safe mode
SQL
0 vote222 views1 answer
Mariadb select limit offset
SQL
0 vote242 views1 answer
Hour and minute between two datatime sql
SQL
3 votes207 views3 answers
Remove all spaces from string sql
SQL
0 vote283 views1 answer
Oracle convert int to date
SQL
0 vote240 views1 answer
Hour differeence in mysql
SQL