用Java Web防范SQL注入攻击

网络的广泛应用给社会带来极大便捷，网络安全特别是SQL注入也成为了一个倍受关注的问题。与此同时，Javaweb由于其平台无关性、“一次编写、随处运行”，使得越来越多的程序员加入到Java当中。本文在分析了SQL注入原理的基础上，提出了几点JavaWeb环境下防范措施。

Defending SQL Injection Attack with Java Web

Now, as the general appliance of network brings to the convenience, we fix our eye on the network security, especially SQL Injection Attack. Meanwhile, for the platform independent and the principle of WORA （Write Once and Run Anywhere） of Java Web, there is more and more people become the java programmer. The paper analyses the principium of SQL Injection Attack, and proposes some way for defending in the circumstances of JavaWeb.