typo in sql parametizer

pixee · Aug 31, 2023 · b36cf0e · b36cf0e
1 parent fb28cf9
commit b36cf0e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/codemods/java/pixee_java_sql-parameterizer.md b/docs/codemods/java/pixee_java_sql-parameterizer.md
@@ -18,7 +18,7 @@ Our changes look something like this:
 ```diff
 - Statement stmt = connection.createStatement();
 - ResultSet rs = stmt.executeQuery("SELECT * FROM users WHERE name = '" + user + "'");
-+ PreparedStatement stmt = connection.prepareStatement();
++ PreparedStatement stmt = connection.prepareStatement("SELECT * FROM users WHERE name = ?");
 + stmt.setString(1, user);
 + ResultSet rs = stmt.executeQuery();
 ```