Remove specific characters from a String in java

Question

I have the following query:

select *from activo where id_oficina in(22,23) and id categoría = 'in(1,2)'

How can I remove the "=" character and the single quotes?

I'm working with kendo Ui and I did not know what can be removed manually.

i does not work, my code line is: filter.replaceAll("[=']",""); — Miranda Alfredo
– Miranda Alfredo, Commented Jan 26, 2016 at 1:24
Are you assigning the new value back to filter? filter = filter.replaceAll("[=']",""); — George Mulligan
– George Mulligan, Commented Jan 26, 2016 at 1:27
Not, only add new String: String filter1 = filter.remplaceAll("[=']",""); filter = filter1; — Miranda Alfredo
– Miranda Alfredo, Commented Jan 26, 2016 at 1:39

Community · Accepted Answer · 2017-05-23 12:23:27Z

1

Know nothing of Kendo, but it appears that you're trying to enter 'in(1,2)' in a field and then have that substituted into the query statement, instead of just entering a single value.

First off, should be using JDBC bind variables, somehow, any SQL statement created by doing string concatenation is ripe with security holes. https://www.owasp.org/index.php/Top_10_2013-A1-Injection

Second, you can't bind values for an IN the same way as a single value. Now, you could always have an IN clause and sometimes you'll bind just a single value. This has been addressed before: How do I bind an ArrayList to a PreparedStatement in Oracle?

edited May 23, 2017 at 12:23

CommunityBot

11 silver badge

answered Jan 26, 2016 at 1:51

Scott Sosna

1,4111 gold badge8 silver badges8 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Bifz · Accepted Answer · 2016-01-26 02:07:44Z

0

The replaceAll suggested by @Andy Turner works:

String string = "select *from activo where id_oficina in(22,23) and id categoría = 'in(1,2)'";
string = string.replaceAll("[=']", "");
System.out.println(string);

answered Jan 26, 2016 at 2:07

Bifz

4032 silver badges9 bronze badges

Collectives™ on Stack Overflow

Remove specific characters from a String in java

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related