/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote286 views1 answer
Write a PL/SQL to print even numbers upto 100.
SQL
5 votes292 views1 answer
Ora-00054 find lock
SQL
0 vote337 views1 answer
Postgres docs /copy metacomand
SQL
19 votes289 views5 answers
Change column name mysql command line
SQL
0 vote296 views1 answer
Mysql backup certain tables workbench
SQL
0 vote299 views1 answer
Rename constraint postgresql
SQL
0 vote281 views1 answer
Mysql jdbc timezone
SQL
0 vote341 views1 answer
Update mysql from paypal shopping cart and ipn
SQL
5 votes282 views2 answers
Sql create tabel with primary key auto_increment code
SQL
1 vote278 views1 answer
Are NULL values in a database the same as that of blank space or zero?
SQL