Re: common validator

2013-03-26 Thread Paul Benedict
Do not use UI validation to defend against SQL Injection Attacks. That's the job of JDBC Prepared Statements. Paul On Tue, Mar 26, 2013 at 5:15 PM, J.V. wrote: > I have to add checking each and every form field in my application for sql > injection attacks (I need a method that will return a bo

Re: common validator

2013-03-26 Thread Muralidhar Yaragalla
have u tried "PreparedStatement" and see how it goes with SQL injection. Long back i have done some work on this. So I dont remember exactly but i think this can solve. On Wed, Mar 27, 2013 at 3:45 AM, J.V. wrote: > I have to add checking each and every form field in my application for sql > in