Does this construction prevent SQL-injection?
ContentValues localContentValues = new ContentValues();
localContentValues.put("some_column", StringFromUser);
localSQLiteDatabase.update("some_table", localContentValues, null, null);
Using ContentValues uses variable binding behind the scenes. So yes, it's not vulnerable to the usual SQL injections.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With