/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote312 views1 answer
Mssql unique key accept nulls
SQL
0 vote300 views1 answer
Min mysql
SQL
0 vote290 views1 answer
How to open mysql in docker
SQL
0 vote276 views1 answer
SQL Server format datetime
SQL
0 vote304 views1 answer
Flask sqlalchemy session delete
SQL
0 vote327 views1 answer
Hashpass
SQL
0 vote343 views1 answer
Duplicate table: 7 ERROR: relation "migrations" already exists (SQL: create table "migrations" ("id" serial primary key not null, "migration" varchar(255) not null, "batch" integer not null))
SQL
3 votes298 views2 answers
Enter mysql command line
SQL
10 votes321 views2 answers
Mysql drop database if exists
SQL
4 votes288 views1 answer
Force drop all tables postgres
SQL