Use prepared statement in COUNT for execution log

InseeFr · Jul 11, 2024 · 8c20e94 · 8c20e94
1 parent 647a8ff
commit 8c20e94
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/kraftwerk-core/src/main/java/fr/insee/kraftwerk/core/outputs/csv/CsvOutputFiles.java b/kraftwerk-core/src/main/java/fr/insee/kraftwerk/core/outputs/csv/CsvOutputFiles.java
@@ -20,6 +20,7 @@
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.StandardOpenOption;
+import java.sql.PreparedStatement;
 import java.sql.ResultSet;
 import java.sql.SQLException;
 import java.sql.Statement;
@@ -97,9 +98,14 @@ public void writeOutputTables(Map<String, MetadataModel> metadataModels) throws
 
 				//Count rows for functional log
 				if (kraftwerkExecutionLog != null) {
-					try(ResultSet countResult = this.getDatabase().executeQuery("SELECT COUNT(*) FROM " + datasetName)){
-						countResult.next();
-                        kraftwerkExecutionLog.getLineCountByTableMap().put(datasetName, countResult.getInt(1));
+					String selectQuery = "SELECT COUNT(*) FROM ?";
+					try(PreparedStatement preparedStatement = getDatabase().getConnection().prepareStatement(selectQuery)) {
+						preparedStatement.setString(1, datasetName);
+						try (ResultSet countResult =
+									 preparedStatement.executeQuery()) {
+							countResult.next();
+							kraftwerkExecutionLog.getLineCountByTableMap().put(datasetName, countResult.getInt(1));
+						}
 					}
 				}
 			} catch (SQLException | IOException e) {