/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote439 views2 answers
Sqlalchemy default value for column
SQL
3 votes317 views1 answer
Index using in query plsql
SQL
1 vote328 views1 answer
Mysql Case sum
SQL
0 vote362 views1 answer
How to join result table in mysql
SQL
0 vote279 views1 answer
Mysql collation for all languages
SQL
3 votes341 views2 answers
Plsql print
SQL
3 votes338 views2 answers
Monthname sql
SQL
1 vote314 views1 answer
Firebase bigquery cloud message
SQL
0 vote339 views2 answers
What is the library that should import to use all functional database features in SQLite?
SQL
0 vote378 views1 answer
Error code 1451 sql
SQL