Question

I’m trying to make a secure login that prevents SQLInjection using the OWASP specification for hashing but for the other parts of my application I’m thinking of using JPA, but I don’t know if it’s a good practice to use a hybrid, or I should just stick to using DAO for all the data layer and keep it consistent?

I’d also like to know if using both JPA and DAO causes compatibility problems at runtime?

Thanks

Answer 1

This is an answer on a discussion about whether it makes sense to use a DAO layer when working with JPA.

How should EntityManager be used in a nicely decoupled service layer and data access layer?

I think the same aplies to any data access logic (e.g. login)