StringEscapeUtils种的转义与反转义方法

StringEscapeUtils类的转义与反转义方法没啥可说的,防止SQL注入String userName ”1 or 11”    Str

StringEscapeUtils类的转义与反转义方法
没啥可说的,防止SQL注入

String userName = ”1' or '1'='1”;    String password = ”123456”;    userName = StringEscapeUtils.escapeSql(userName);    password = StringEscapeUtils.escapeSql(password);


http://www.cnblogs.com/anuoruibo/archive/2012/06/14/2549294.html