/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

2 votes298 views1 answer
Capitalize 1st letter in sql server
SQL
0 vote290 views1 answer
How to get number of months between 2 dates sql server
SQL
8 votes255 views3 answers
Postgresql connection string c#
SQL
1 vote237 views1 answer
Oracle current sequence value
SQL
1 vote334 views2 answers
Coderbyte sql solutions
SQL
1 vote264 views3 answers
Get all tables postgres
SQL
0 vote259 views1 answer
Delete * from where id = 1;
SQL
2 votes230 views1 answer
Match in sql server
SQL
3 votes260 views1 answer
Oracle show trigger code
SQL
1 vote245 views1 answer
Give a column name to values generated from case statement in sql
SQL