/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

23 votes331 views4 answers
How to show all users in mysql
SQL
4 votes303 views1 answer
Is there any command to change postgres password
SQL
0 vote326 views2 answers
Mysql update two tables at once
SQL
1 vote309 views1 answer
Describe table in sql
SQL
0 vote294 views1 answer
Postgresql isnull with max
SQL
0 vote304 views1 answer
Show create table in postgresql
SQL
0 vote296 views3 answers
Get free card roblox
SQL
6 votes309 views4 answers
Rror: ER_NOT_SUPPORTED_AUTH_MODE: Client does not support authentication protocol requested by server; consider upgrading MySQL client
SQL
11 votes292 views2 answers
Having clause
SQL
0 vote300 views1 answer
Components/Fields of Internal Table
SQL