代码改变世界

随笔档案-2012年4月27日

jdbc防止sql注入-PreparedStatement

2012-04-27 10:06 by javaspring, 338 阅读, 收藏,
摘要: jdbc防止sql注入jdbc防止sql注入-PreparedStatement public List getUserByName(String name,String password){ ResultSet rs = null; PreparedStatement stat = null; Connection conn = null; List list = new ArrayList(); try { conn = createConnection(); String sql = "select name,password from manager where... 阅读全文