create a user on mysql database through java gui

Question

I am coding an interface which manages a database with all DML and some DDL features. One feature should be, that an admin can add users to the database with specified priviledges. I know how to grant priviledges in sql i only need it done via a java application.

So is there a way to get this done safely? It probably will work with a simple executeUpdate

String cu = "create user"+userName+" identified by "+pw+";";
Statement stmt; 
stmt = con.createStatement();
stmt.executeUpdate(query);

but this opens my ass for injections. Is there a way to get this done safely by a preexisting method ? Please help me out, mighty stackoverflow community :)

aryann · Accepted Answer · 2013-12-04 11:16:07Z

1

Yes, there is a better way of doing this. Use PrepredStatement instead of Statement.

answered Dec 4, 2013 at 11:16

aryann

9595 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

PeterYoshi Over a year ago

thanks i didnt notice the possibilities of using preparedstatement. i didnt think of putting the wildcards anywhere, sorry for not thinking of consulting the oradocs myself, should have come to my mind :S

Masudul · Accepted Answer · 2013-12-04 11:15:06Z

1

You need gap and quation ' for password,

 String cu = "create user "+userName+" identified by '"+pw+"';";
                         |
                         |_put gap here

answered Dec 4, 2013 at 11:15

Masudul

22k5 gold badges45 silver badges60 bronze badges

1 Comment

PeterYoshi Over a year ago

this was just a quick sample of my thoughts i know the syntax, but thanks

Collectives™ on Stack Overflow

create a user on mysql database through java gui

2 Answers 2

1 Comment

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related