/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

19 votes144 views5 answers
Date between in mysql
SQL
0 vote144 views1 answer
Sql fetch next 10 rows pdo
SQL
0 vote168 views1 answer
Transaction and commit trong sql server
SQL
0 vote141 views1 answer
Online sql testing tool
SQL
0 vote148 views1 answer
Sql create table with datetime automatically
SQL
6 votes158 views1 answer
SQL insert all columns
SQL
6 votes241 views1 answer
Sql insert values into table
SQL
1 vote156 views1 answer
Pl sql create table from another table
SQL
5 votes174 views1 answer
Oracle get ddl
SQL
0 vote147 views1 answer
Create new schema mysql
SQL