Start of a new article on the wiki: http://www.owasp.org/index.php/ Preventing_SQL_Injection_in_Java -- Stephen de Vries Corsaire Ltd E-mail: stephen at corsaire.com Tel: +44 1483 226014 Fax: +44 1483 226068 Web: http://www.corsaire.com