Java JDBCI批量插入資料

標籤：style   blog   color   io   os   使用   ar   java   for   

 

 

智能插入：將整批分批，每一千條提交一次，sql注入（安全，使用軟解析，提高效率）

sql注入攻擊：簡單例子

select * from table where name=‘"+un+"‘ and psw=‘"+pw+"‘",

假如可以輸入任何字元,un隨便輸入12345‘ or 1=1--這樣提交過來的aa就會select * from table where name=‘12345‘ or 1=1--password

String sql = "insert into employee (name, city, phone) values (?, ?, ?)";Connection connection = new getConnection();PreparedStatement ps = connection.prepareStatement(sql);final int batchSize = 1000;int count = 0;for (Employee employee: employees) {    ps.setString(1, employee.getName());    ps.setString(2, employee.getCity());    ps.setString(3, employee.getPhone());    ps.addBatch();    if(++count % batchSize == 0) {        ps.executeBatch();    }}ps.executeBatch(); // insert remaining recordsps.close();connection.close();

 

Java JDBCI批量插入資料