Which one's quicker?

nerotnt · **Joined:** Wed Oct 08, 2003 10:31 am **Posts:** 247

Which one's quicker in retrieving information:

Method 1

Code:

List res = session.find("from vo.Mp as m where m.ref like %" + ref + "%");

Method 2

Code:

Query query = session.createQuery(from vo.Mp as m where m.ref like ':ref');
query.setParameter("ref", "%" + ref + "%" );

Thanks in advance.

gavin · **Posted:** Tue Jan 20, 2004 9:03 am

NEVER use Method 1. It is slow and a security hole.

sgwood · **Posted:** Tue Jan 20, 2004 9:32 am

gavin wrote:

NEVER use Method 1. It is slow and a security hole.

Why?

Thanks,

Sherman

michael · **Posted:** Tue Jan 20, 2004 9:34 am

Possible SQL Injection

emmanuel · **Posted:** Tue Jan 20, 2004 9:47 am

gloeglm wrote:

Possible SQL Injection

Yes, in the 2nd, special chars are escaped properly.

nerotnt · **Joined:** Wed Oct 08, 2003 10:31 am **Posts:** 247

gavin wrote:

NEVER use Method 1. It is slow and a security hole.

Thanks to all for the advice.

bliu_ditech · **Joined:** Thu Sep 04, 2003 1:46 pm **Posts:** 20

Hi,

Can someone please discuss the differences between

session.find()
session.iterate()
session.createQuery()

and when we should or should not use those methods?

It seems like I've missed out on a lof of Hibernate reference documentation.

This is the only document that I know about. Are there others?

http://www.hibernate.org/hib_docs/refer ... index.html

Thanks,
-Ben

christian · **Posted:** Tue Jan 20, 2004 5:24 pm

This is a 140 page reference documentation! Please read it, it contains all the information you need to understand these methods. Also read the Javadoc API description and the many articles and tutorials about Hibernate.