/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

8 votes240 views6 answers
Insert command in sql
SQL
13 votes210 views1 answer
Views in sql
SQL
25 votes215 views5 answers
Date in mysql
SQL
15 votes213 views4 answers
Export mysql db using command line
SQL
0 vote197 views2 answers
Which MySQL statement is used to delete data from a database
SQL
0 vote220 views2 answers
How to take recent row without limit in mysql
SQL
14 votes224 views3 answers
Inner join sql oracle
SQL
11 votes211 views1 answer
Ddl materialized view
SQL
58 votes357 views4 answers
Mysql drop column
SQL
10 votes209 views4 answers
Inner join in update query mysql
SQL