Rewrite and Refactor Method to Distribute Two-Factor Code

We are going to make one more pass at the distribute2Factor() method. We need to incorporate the application_id in several places. While we are here, we are also going to refactor the code with a bit more security and organization.

If you look back at this method in the last chapter, you will see that we have two dynamic queries: one query we build to get data from the HR.emp_mobile_nos table and others, and another query we build to update the v_two_fact_cd_cache view. For security, we prefer parameterized procedures and functions to dynamic queries. This method and these dynamic queries run in the Oracle database and are unlikely to be susceptible to SQL injection, but we should consider ...

Get Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.