0

In order to prevent SQL Injection i am trying to convert dynamic queries to named parameter query.. however, when i am using this code -

String query = "from Ad a left join fetch a.adQueries left join fetch a.aduser u left join fetch u.profile where a.id =:identifier";
        Query q = s.createQuery(query);
        q.setParameter("identifier", id);

No data is returned from DB even though the data is there and the same query in dynamic form return data

and when i use this code -

String query = "from Ad a left join fetch a.adQueries left join fetch a.aduser u left join fetch u.profile where a.id =:identifier";
        Query q = s.createQuery(query);
        q.setLong("identifier", id);

it throws a Null pointer exception..

Please let me know where i am going wrong

Thanks

1 Answer 1

1

Perhaps id is null, it can cause such a behaviour.

Sign up to request clarification or add additional context in comments.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.