/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

7 votes121 views1 answer
Forge server hosting
SQL
0 vote152 views1 answer
The fetch keyword oracle
SQL
0 vote134 views1 answer
Object of class mysqli_result could not be converted to string
SQL
0 vote144 views1 answer
Mysql join column order By and group By
SQL
0 vote141 views1 answer
Connect by query in oracle
SQL
0 vote137 views1 answer
Grant access on table in oracle
SQL
2 votes144 views1 answer
ADD COLOUNS CREATED AND UPDATED AT IN MYSQL
SQL
0 vote184 views1 answer
Alternative for LIMIT sql
SQL
0 vote147 views1 answer
Postgres grep entire database
SQL
0 vote113 views1 answer
Sql trim whitespace
SQL