users@glassfish.java.net

Re: how can i prevent sql injection under this situation??

From: <glassfish_at_javadesktop.org>
Date: Wed, 20 Feb 2008 06:52:58 PST

If you were to use JPQL instead of SQL then the parser would offer protection but with SQL you will need to sanitize the SQL within your application.
--Gordon
[Message sent by forum member 'gyorke' (gyorke)]

http://forums.java.net/jive/thread.jspa?messageID=259919