CODE EXAMPLE FOR SQL

oracle pl/sql prevent sql injection

CREATE OR REPLACE PROCEDURE testBind(vname IN VARCHAR2) AS
BEGIN

   EXECUTE IMMEDIATE 'UPDATE products set price = price-1 where name = ' || vname;

COMMIT;
END;
/