Hi,

I cant select using hibernate (insert works fine). This is my code:

User userAuth = null;
Transaction tx = null;
Session session = InitSessionFactory.getInstance().getCurrentSession();
try
{
tx = session.beginTransaction();
List users = session.createQuery("from db_user where name='"+request.getParameter("username")+"' AND password='"+request.getParameter("password")+"'").list();
userAuth = (User)users.get(0);
tx.commit();
}
catch (HibernateException e)
{
if (tx != null && tx.isActive())
tx.rollback();
}

this is the User xml file:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hibernate-mapping PUBLIC "-//Hibernate/Hibernate Mapping DTD 3.0//EN" "http://hibernate.sourceforge.net/hibernate-mapping-3.0.dtd" >
<hibernate-mapping>
<class name="se.tesella.persistent.User" table="DB_USER">
<id name="ID" column="ID" type="java.lang.Integer">
<generator class="increment"/>
</id>
<property name="name" column="NAME" type="java.lang.String" />
<property name="password" column="PASSWORD" type="java.lang.String" />
<property name="searchString" column="SEARCHSTRING" type="java.lang.String" />
</class>
</hibernate-mapping>

The object userAuth is always null. (I've managed to insert som users though)

Kind regards

Your query looks wrong. It should be:

You just advised someone to create a SQL injection security hole in their application.

Sorry, didn't get you