Quantcast
Channel: MySQL Forums - Connector/J, JDBC and Java
Viewing all articles
Browse latest Browse all 884

rewriteBatchedStatements / SQL injection (no replies)

$
0
0
We are using a Google CloudSQL MySQL instance with the MySQL Connector/J and Spring Data on top.

We notice some performance issues when inserting large amounts of data. Setting rewriteBatchedStatements=true improves performance dramatically. But the documentation says:

> Notice that this has the potential for SQL injection if using plain java.sql.Statements and your code doesn't sanitize input correctly.

What does that mean exactly? Can you give an exmaple how such an SQL injection could be accomplished and prevented?

Thanks.

Viewing all articles
Browse latest Browse all 884

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>