Computer scienceProgramming languagesJavaAdditional instrumentsJDBC

JDBC Prepared Statements

SQL injection

Report a typo

What happens if we execute the following code:

String insert = "INSERT INTO penguins (nickname, profession, rank) VALUES (?, ?, ?)";

try (PreparedStatement preparedStatement = con.prepareStatement(insert)) {
    preparedStatement.setObject(1, "Kowalski");
    preparedStatement.setObject(2, "Brains of the Penguins");
    preparedStatement.setObject(3, "Lieutenant); DROP TABLE penguins");

    preparedStatement.executeUpdate();
}

Select one option from the list

It will add a new record to the table and drop penguins table

It will throw an SQL exception

It will add a new record to the table and set rank to the "Lieutenant); DROP TABLE penguins"

It will not compile

___

Create a free account to access the full topic