/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

7 votes290 views1 answer
Oracle alter sequence restart start with
SQL
0 vote217 views1 answer
Sql date time query find
SQL
0 vote204 views2 answers
Disallowed function mysql to_date()
SQL
1 vote216 views1 answer
Sql server epoch to datetime
SQL
0 vote208 views1 answer
Go install mysql
SQL
2 votes214 views1 answer
Postgresql create schema in specific database
SQL
1 vote207 views2 answers
Laravel get sql query eloquent with parameters
SQL
13 votes229 views3 answers
List all the tables in sql
SQL
8 votes213 views4 answers
How to calculate the age from date of birth in python
SQL
0 vote233 views2 answers
Call to undefined function mysql_query()
SQL