GraphNode Developer Edition

1  public class UserController {
2      @PostMapping("/login")
3      public ResponseEntity login(@RequestBody LoginRequest request) {
4          String query = "SELECT * FROM users WHERE username = '" 
5              + request.getUsername() + "' AND password = '" 
6              + request.getPassword() + "'"; ⚠ SQL Injection vulnerability detected
7          
8          // GraphNode suggestion: Use parameterized queries
9          // Click to apply automatic fix ↓
10         // String query = "SELECT * FROM users WHERE username = ? AND password = ?";
11         // PreparedStatement stmt = connection.prepareStatement(query);
12         // stmt.setString(1, request.getUsername());
13         // stmt.setString(2, request.getPassword());