/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

1 vote334 views1 answer
Mysql2::Error: Incorrect string value: '\xE2\x80\x8B
SQL
1 vote361 views1 answer
Rows to comma separated values in mssql
SQL
0 vote343 views1 answer
Sql delete row from table where id
SQL
0 vote351 views2 answers
Msg 8164, Level 16, State 1, Procedure getSalaryMonth, Line 31 [Batch Start Line 13] An INSERT EXEC statement cannot be nested.
SQL
0 vote422 views1 answer
Mysql get nth highest
SQL
0 vote383 views1 answer
Split string by comma in sql server
SQL
8 votes339 views5 answers
Alter table add column with default value
SQL
0 vote333 views1 answer
What is between operator
SQL
1 vote344 views1 answer
Sql Split string function
SQL
0 vote333 views1 answer
Delete insert record in sql server
SQL