/SQL/How to prevent sql injection in java

How to prevent sql injection in java

How to prevent sql Injection

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Source: phppot.com

How to prevent sql injection in java

// This should REALLY be validated too
String custname = request.getParameter("customerName");
// Perform input validation to detect attacks
String query = "SELECT account_balance FROM user_data WHERE user_name = ? ";
PreparedStatement pstmt = connection.prepareStatement( query );
pstmt.setString( 1, custname);
ResultSet results = pstmt.executeQuery( );

Source: cheatsheetseries.owasp.org

Similar codes

47 votes172 views6 answers
Add column mysql
SQL
1 vote145 views1 answer
Postgresql append array
SQL
1 vote117 views1 answer
SQl Server Versionen Releases und Build-Nummern
SQL
0 vote104 views1 answer
How to write triggers to increment or decrement the number of employees
SQL
0 vote114 views1 answer
DELETE DUPLICATE VALUES FROM A TABLE IN SQL SERVER
SQL
5 votes101 views1 answer
Oracle ora-00054 causes
SQL
0 vote132 views2 answers
CREATE OR REPLACE FUNCTION
SQL
0 vote100 views1 answer
Select multiple row from primary key sql
SQL
0 vote159 views1 answer
Alter table name including schema
SQL
1 vote99 views1 answer
Sql delete row with auto increment
SQL