/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

4 votes174 views4 answers
Print pl sql
SQL
-1 vote197 views1 answer
Pl/sql how to delete a trigger
SQL
1 vote229 views1 answer
How not to sort by average rating
SQL
0 vote175 views1 answer
Adding conditions in MERGE statement in Oracle SQL for INSERT/UPDATE
SQL
0 vote172 views1 answer
Insert thai language sql server
SQL
2 votes189 views2 answers
Postgres select duplicate columns
SQL
0 vote172 views1 answer
Mariadb mysql root access denied
SQL
0 vote187 views1 answer
Sql developer search all packages for text
SQL
16 votes189 views4 answers
Mysql import from sql file
SQL
0 vote220 views2 answers
How to get max from each department in sql
SQL