title: SQL Injection in getHibernateTemplate().find()
body: <p>I was learning hibernate framework and wanted to know if SQL Injection was possible in the following code?</p>
  
  <pre><code>getHibernateTemplate().find("select name from users where city=?", new Object[] { u_city }); 
  </code></pre>
  
  <p>Is there a better way to do this? (in terms of security)</p>