How to capture/encode special character for SQL Server in java app? -

-

I have Java app + SQL Server database DB operation uses JDBC with dynamic SQL string. Example:

Select the column from the tab where the column = stringperm

is the StringParam user input. If the string parm contains the apostost, then the Java app will throw exceptions and say SQL can not be executed.

Never insert a user directly into an SQL query You must use the prepared space. Without changing the Java code, I do not see any way to make it secure.


Comments

Post a Comment

Popular posts from this blog

email - PHP mail error ... failed to open stream : permission denied -

-
I am trying to send an email using PHP mail. I get the following error: WARNING: Unknown: Failed to open the stream: Permission denied in unknown in line 0 Fatal error: unknown: required to open the required '/ Home Php $ name = $ _REQUEST ['name']; $ Email = $ _REQUEST ['email']; $ Theme = $ _REQUEST ['subject']; $ Message = $ _REQUEST ['message']; Mail ("myemail@myhost.com", "topic title", $ message, "sender: $ email"); Header ("Location: http://www.google.com"); ? & Gt; This message is not a mail error PHP file can not open ask_us.php if ask_us If the .php is your file, then check its permissions (and parent folders).
Read more

sql server - SQL Query - Delete duplicates if more than 3 dups? -

-
Is there an elegant SQL statement for deleting duplicate records in a table, but only if X is the number of duplicates? So it allows up to 2 or 3 duplicates, but what is it? At present I have a statement that does the following: Remove table from table, left outer (duplicate from table group like Triad, Diplo 1, Duplex 2) 1, Select Max (ID) by Dupl 2. Maintenance as TDI) = Maintenance. Where are kept. Road is empty This works very well. But what I want to do now will only remove those lines, if they have more than 2 duplicates. Thanks with in the form of CT (select row_member ( )) (Divol1 by split, dupol2 sequence by id) from table as rn) from cte where rn & gt; 2; - or & gt; 3 etc. The query is being classified by a 'line number' for each record, (Dupl 1, Dupl 2) and ordered by ID. In fact, this line number is calculated as 'duplicate', which has the same duplicate 1 and duplex 2 and then specifies the number 1, 2, 3. If you want to keep ...
Read more

c# 3.0 - Issue with getting 2 chars from string using indexer -

-
I have a problem reading four values. See my program below I want to evaluate an infix expression. As you can see, I want to read '10', '*', '20' and then use them ... But if I use string indexers [0] then '1' and Not '10' and therefore I am not able to get the expected results. Can you give me some suggestions? Code C # class is in the program {static zero main (string [] arg) {string infix = "10 * 2 + 20-20 + 3"; Float result = evaluation infix (infix); Console.WriteLine (results); Console.ReadKey (); } Evaluation of public static float (String) {Stack & lt; Float & gt; Operand = new stack & lt; Float & gt; (); Stack & LT; Four & gt; Operator1 = new stack & lt; Char & gt; (); Int len ​​= s.Length; For (int i = 0; i & lt; len; i ++) {if (Iopater (s [ii]) / has been an issue because s [i] gives each letter and i want number operator 10 Am Push (s [i]); Else {operand.Push (S [ii]); If (operand....
Read more