/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

0 vote140 views2 answers
Mysql decimal remove trailing zeros
SQL
1 vote153 views1 answer
Oracle create index if not exists
SQL
0 vote177 views1 answer
For select oracle
SQL
4 votes136 views1 answer
Oracle error line
SQL
0 vote158 views1 answer
Check if a column is a primary key in sql server
SQL
0 vote139 views1 answer
T-SQL Retry (deadlock)
SQL
10 votes145 views3 answers
How to fetch first 5 characters in sql
SQL
1 vote134 views1 answer
Set all the vluses in calumn in sql to false
SQL
4 votes153 views3 answers
Drop Table Oracle
SQL
0 vote138 views1 answer
Sql trying to delete database in use
SQL