Validation for Text Area

[Praveen Reddy]

Hi

Can any one please let me know how to do validations for text area in order to prevent SQL Injections.

i dont want any one to inject some SQL statements to update my database.

Thanks
Praveen

[Bear Bibeault]

This is not something that you should be handling at the client. Using best practice JDBC techniques, such as prepared statements, is the way to handle SQL injection.

I'll move this off to the JDBC forum for further advice.

[Praveen Reddy]

Thanks for the Suggestion i am using hibernate i want to validate my text area

[Scott Selikoff]

Moving to Object Relational mapping forum, although I suspect SQL injection is not possible in Hibernate since there are no direct SQL queries. SQL injection only plays a part when you are forwarding input directly into a SQL query such as

"SELECT * FROM widgets where id="+input+" AND ..."