/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote330 views1 answer
Phpmyadmin mysql conflict
SQL
0 vote363 views1 answer
Mssql + bit + in python orm
SQL
0 vote375 views2 answers
Replace null with 0 in sql
SQL
0 vote370 views1 answer
Set engine to innodb
SQL
16 votes365 views1 answer
Sql comment'
SQL
3 votes353 views2 answers
Oracle apex charging debug
SQL
1 vote344 views1 answer
Oracle finding duplicate records
SQL
18 votes348 views3 answers
Mysql current date
SQL
0 vote337 views1 answer
Procedures sql insert mysql
SQL
5 votes333 views1 answer
Oracle find foreign key dependencies
SQL