/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

1 vote303 views3 answers
How to create a table structure from another table in mysql
SQL
0 vote643 views1 answer
Sql field equals multiple values
SQL
0 vote264 views1 answer
Back up stored procedures mysql
SQL
13 votes291 views1 answer
Sql join 3 tables on id
SQL
0 vote297 views1 answer
SQL Where-Klausel
SQL
1 vote304 views1 answer
Dropping a constraint in ms sql
SQL
5 votes308 views2 answers
Mysql dump mysql db cli
SQL
4 votes313 views3 answers
Sql find second highest salary employee
SQL
2 votes277 views1 answer
Set boolean flasksql
SQL
1 vote280 views1 answer
DoVerify() must be an instance of Lcobucci\\JWT\\Signer\\Key
SQL