/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

2 votes274 views2 answers
Python escape string for sql
SQL
0 vote243 views1 answer
Sql dmv to capture updates
SQL
0 vote237 views1 answer
Sql datediff month
SQL
0 vote233 views2 answers
Pg_restore: error: input file appears to be a text format dump. Please use psql.
SQL
0 vote211 views1 answer
Mysql date + 1 day
SQL
7 votes243 views1 answer
Error Code: 1175. You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column. To disable safe mode, toggle the option in Preferences -> SQL Editor and reconnect.
SQL
0 vote260 views3 answers
Drop table operation failed on table 'TableHistory' because it is not supported operation on system-versioned temporal tables.
SQL
-1 vote249 views1 answer
Mysql order by on condition
SQL
1 vote266 views1 answer
Primary key with prefix sql
SQL
0 vote258 views1 answer
Compare field sql server
SQL