title: Resource Injection vulnerability
body: <p>Am trying to resolve a resource injection issue found in our code by Fortify Static scan. We have <code>updateUserInfo(User user)</code> method in <code>Service</code> class which makes a call to <code>updateUser(User user)</code> method on <code>Dao</code> class. <code>updateUser(User user)</code> method code has below lines of code.</p>
  
  <pre><code> public void updateUser(User user) {
       Map params = new HashMap();
       params.put("id", user.getId());
       // below code makes a call to stored proc updateUser and passes params as parameters to database(ibatis config)
       getSqlMap.update("updateUser", params);
   }
  </code></pre>
  
  <p>Fortify complains that attacker can specify the value that enters at <code>updateUserInfo</code> in <code>Service</code> class and this value is used to access a system resource at the line <code>getSqlMap.update</code> call.</p>
  
  <p>I am not sure how to change this code to overcome this vulnerability. Please help.</p>