Queries

is null Vs = null
-------------------
http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:17320984423926

Techniques

1. File Search: select whole word, select case sensitive

JDBC Template

If your Query returns single value then use NamedParameterJdbcTemplate:
---------------------------------------------------------------------------

String fanNumber = new NamedParameterJdbcTemplate(
        getJdbcTemplate()).queryForObject(getSQL("OM.GET_ADH_NUM"), params, String.class);

Technical Concepts

1. SQL injection
2. Cross-site scripting