Android SQLite, ask about ContentValues

Question

I would like to know if using the ContentValue class in queries is good practice to prevent SQL injection.

thanks

Answer 1

Personally, whether you ContentValues or use regular SQLiteDatabase queries, you cannot be 100% safer from SQL injections.

With that said, if you're more comfortable using ContentValues , it's best to avoid typing any user or if you want to use SQLiteDatabase queries, look at SQLiteQueryBuilder , it helps structure your query.

If Android offers parameterized queries that will be best used for protection against injection. Until then, we will have to wait and find alternatives.