diff --git a/src/main/java/SQLInjectionExample.java b/src/main/java/SQLInjectionExample.java index 8f42a44..4394186 100644 --- a/src/main/java/SQLInjectionExample.java +++ b/src/main/java/SQLInjectionExample.java @@ -12,8 +12,8 @@ protected void doGet(HttpServletRequest request, HttpServletResponse response) t try { Connection con = DriverManager.getConnection("jdbc:mysql://localhost:3306/db"); - String query = "SELECT * FROM users WHERE user name = '" + request.getParameter("username") + "';"; - Statement stmt = con.createStatement(); + String query = "SELECT * FROM users WHERE user name = '" + request.getParameter("username") + "';"; + Statement stmt = con.createStatement(); stmt.executeQuery(query); } catch (Exception e) {