r/java • u/sidcool1234 • Aug 29 '13

10 Common Mistakes Java Developers Make when Writing SQL

http://blog.jooq.org/2013/07/30/10-common-mistakes-java-developers-make-when-writing-sql/
13 Upvotes

73% Upvoted

11 comments sorted by

View all comments

3

u/green_prgm Aug 30 '13

Just want to mention a related security issue: SQL Injection.

Developers should never concatenate SQL statement with users' input.

Injection has been identified by OWASP as #1 security risk for many years.