/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote325 views1 answer
How to find unique element in sql
SQL
0 vote277 views1 answer
Arithmetic expression in sql
SQL
4 votes272 views1 answer
Sql any
SQL
2 votes230 views2 answers
Mysql get last character of string
SQL
0 vote277 views1 answer
Sql convert float to string
SQL
4 votes275 views2 answers
Postgres update single column
SQL
0 vote291 views1 answer
Primary key multiple colums
SQL
7 votes268 views4 answers
Mysql delete older duplicates
SQL
1 vote279 views1 answer
Job for mariadb.service failed because the control process exited with error code. see "systemctl status mariadb.service" and "journalctl -xe" for details.
SQL
7 votes263 views1 answer
Alter sequence set current value oracle
SQL