/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

2 votes196 views1 answer
Possgress drop if exists table
SQL
0 vote209 views2 answers
Uncaught Error: Cannot use object of type mysqli_result as array
SQL
0 vote187 views2 answers
Which MySQL statement is used to delete data from a database
SQL
0 vote208 views1 answer
Update having mysql
SQL
0 vote204 views1 answer
Mysql subtract month from timestamp
SQL
2 votes190 views3 answers
Replace null in sql
SQL
1 vote199 views2 answers
Mysql show views
SQL
4 votes219 views2 answers
Sqlalchemy_database_uri for mysql
SQL
0 vote151 views1 answer
How to connect sql server using ip address in c#
SQL
0 vote189 views1 answer
Mysqldump don't drop table
SQL