JCreator 连接数据库 -防止sql漏洞

JCreator 连接数据库


import java.sql.*;


//1，连接数据库
Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver");


//2，得到链接
Connection ct=DriverManager.getConnection("jdbc:microsoft:sqlserver://127.0.0.1:1433;databaseName=spdb","sa","123456");


//3，创建Statement
Statement sm=ct.createStatement();
//ResultSet rs=sm.executeQuery("select top 1 * from users where username='"+u+"' and passwd='"+p+"'");
ResultSet rs=sm.executeQuery("select top 1 passwd from users where username="'");


if(rs.next()){
//说明用户存在
String dbPasswd=rs.getString(1);