How should I sanitize database input in Java?

Question

Could someone please point me to a good beginner guide on safely running SQL queries formed partly from user input? I\'m using Java, but a language neutral guide is fine to

Answer 1

Use PreparedStatement instead of Statement