/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

8 votes210 views1 answer
Check mysql version phpmyadmin
SQL
0 vote201 views2 answers
How to create a table from another table in sql derby
SQL
-1 vote200 views2 answers
First letter capital in mysql query
SQL
4 votes264 views2 answers
DB::transaction
SQL
0 vote195 views1 answer
Sql not exists
SQL
0 vote211 views1 answer
Create dump file mysql workbench
SQL
0 vote185 views1 answer
Postgresql newline character
SQL
27 votes212 views6 answers
Set password mysql
SQL
0 vote207 views1 answer
Select row from mysql where date more than 30 days
SQL
10 votes208 views2 answers
Forgot my mysql password mac
SQL