how to prevent sql injection

submited by krishnas on Thu Sep 30th, 2010

Using prepared statements with parameters helps to defend against SQL injection in most common cases, when you would otherwise interpolate untrusted content into a string and then execute the string as an SQL statement.

Topic: java