/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

1 vote113 views1 answer
Ora-01950 no privileges on tablespace
SQL
9 votes128 views5 answers
Laravel to sql
SQL
0 vote127 views1 answer
Check command
SQL
0 vote119 views2 answers
Database owner can't create new tables postgres
SQL
3 votes111 views5 answers
ModuleNotFoundError: No module named 'MySQLdb'
SQL
0 vote120 views1 answer
Postgresql on conflict pair
SQL
0 vote125 views2 answers
Sql query in dax power bi
SQL
1 vote119 views1 answer
How to use a trigger to validate input data
SQL
6 votes111 views3 answers
Mysql change auto_increment start value
SQL
0 vote125 views1 answer
Sql alchemy escape ; in insert statement
SQL