I have a java application, want to insert arabic words to mysql database, my code looks like
Connection con = null; String url = \"jdbc:mysql://localhos
@maerics I tried using PreparedStatement instead and SQL Injection attack is still able to be done, I think either am implementing the PreparedStatemnt wrong or your feed is incorrect.