/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

2 votes156 views1 answer
Oracle current date without time
SQL
2 votes179 views1 answer
Alter table add multiple columns postgresql
SQL
0 vote173 views1 answer
Mysql find db contarint
SQL
1 vote205 views1 answer
Create new index takes long time postgresql
SQL
-1 vote183 views3 answers
My sql alter table
SQL
13 votes169 views4 answers
GROUP BY clause; this is incompatible with sql_mode=only_full_group_by
SQL
2 votes218 views3 answers
Current setting postgres timezone
SQL
3 votes127 views2 answers
Mysql sum with condition
SQL
0 vote178 views1 answer
Sql get number of days between two dates
SQL
0 vote184 views1 answer
Mysql backup certain tables workbench
SQL