/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote198 views1 answer
Sql cnvert bit to nvarchar
SQL
0 vote195 views1 answer
ValueError: A string literal cannot contain NUL (0x00) characters.
SQL
1 vote183 views1 answer
How to remove identity from a column in sql server
SQL
0 vote226 views1 answer
After kill process Failed to start mysqld.service: Unit mysqld.service not found.
SQL
0 vote200 views1 answer
Mysql cast null to string
SQL
0 vote195 views1 answer
Python dictionary to sql update
SQL
1 vote173 views1 answer
Set statistics on in ssms
SQL
8 votes191 views2 answers
Update sql server from another table
SQL
0 vote226 views1 answer
Mariadb.service failed with result 'exit-code'
SQL
0 vote177 views1 answer
Error in connection_import_file(conn@ptr, name, value, sep, eol, skip) : RS_sqlite_import: test.csv line 2 expected 11 columns of data but found 1
SQL