SQL for Java Devs · interview question
How can you safely execute a user-supplied search term in a SQL query using a PreparedStatement?
Multiple choiceMediumchapter-8-curatedpremiumsql-for-java-devspreparedstatements
Answer and explanation
Correct answer
A. Bind the search term using setString
Why
To safely execute user-supplied input, you should bind the input using methods like setString in a PreparedStatement. This ensures that the input is treated as data rather than executable SQL code, preventing SQL injection.
Test yourself on SQL for Java Devs
A free test with instant, explained results. No account needed.
More SQL for Java Devs questions
- How can JDBC transactions help maintain data integrity during an e-commerce checkout process?
- What would be the effect of not closing a PreparedStatement in a Java application?
- In JDBC, how do you ensure that SQL injection is prevented when executing a query that searches for a user by email?
- Why do teams use SQL JOINs to fetch relational data in a single query in production code?
- What should a repository method mainly encapsulate?
- How can you prevent the N+1 query problem when retrieving a list of orders with their customer details?