How to prevent SQL Injection with JPA and Hibernate?

by 
Query q = sessionFactory.getCurrentSession().createQuery("from LoginInfo where userName = :name");
q.setParameter("name", userName);
List<LoginInfo> loginList = q.list();

You have other options too, see this nice article from mkyong.

More Related Contents:

  1. JPA JoinColumn vs mappedBy
  2. Hibernate throws MultipleBagFetchException – cannot simultaneously fetch multiple bags
  3. Hibernate Annotations – Which is better, field or property access?
  4. Hibernate JPA Sequence (non-Id)
  5. How to store date/time and timestamps in UTC time zone with JPA and Hibernate
  6. How to call a stored procedure from Java and JPA
  7. Bypass GeneratedValue in Hibernate (merge data not in db?)
  8. How does the FetchMode work in Spring Data JPA
  9. What is “the inverse side of the association” in a bidirectional JPA OneToMany/ManyToOne association?
  10. Prevent SQL injection attacks in a Java program
  11. Hibernate Union alternatives
  12. Hibernate – @ElementCollection – Strange delete/insert behavior
  13. Difference between @OneToMany and @ElementCollection?
  14. JPA SQL Server No Dialect mapping for JDBC type: -9
  15. Transaction marked as rollback only: How do I find the cause
  16. JPA entity without id
  17. Can I combine a @Query definition with a Specification in a Spring Data JPA repository method?
  18. How to use multiple JOIN FETCH in one JPQL query
  19. Multiple fetches with EAGER type in Hibernate with JPA
  20. Could not commit JPA transaction: Transaction marked as rollbackOnly
  21. Spring JpaRepository – Detach and Attach entity
  22. Native query with named parameter fails with “Not all named parameters have been set”
  23. Specifying an Index (Non-Unique Key) Using JPA
  24. IN-clause in HQL or Java Persistence Query Language
  25. @BatchSize a smart or stupid use?
  26. How to set the timeout period on a JPA EntityManager query
  27. Spring Data JPA and Exists query
  28. Error creating bean with name ‘entityManagerFactory
  29. How to force Hibernate to return dates as java.util.Date instead of Timestamp?
  30. JPA Select latest instance for each item

Leave a Comment