regex101: PCRE (Legacy) Match Workspace

Pro

Non-Capturing Group(?:INSERT INTO|UPDATE|SELECT|DELETE)

1st AlternativeINSERT INTO

INSERT INTOthe literal text INSERT INTO (case insensitive)

2nd AlternativeUPDATE

UPDATEthe literal text UPDATE (case insensitive)

3rd AlternativeSELECT

SELECTthe literal text SELECT (case insensitive)

4th AlternativeDELETE

DELETEthe literal text DELETE (case insensitive)

Non-Capturing Group(?:[^;'"]|(?:'[^']*?')|(?:"[^"]*?"))+

+repeats the group contents below at least once:

1st Alternative[^;'"]

Negated Character Class[^;'"]

;the literal ; (59₁₀ / 73₈ / 3B₁₆)

'the literal ' (39₁₀ / 47₈ / 27₁₆)

"the literal " (34₁₀ / 42₈ / 22₁₆)

2nd Alternative(?:'[^']*?')

Non-Capturing Group(?:'[^']*?')

'the literal ' (39₁₀ / 47₈ / 27₁₆)

Negated Character Class[^']*?

*?matches any number of characters outside the set below:

'the literal ' (39₁₀ / 47₈ / 27₁₆)

3rd Alternative(?:"[^"]*?")

Non-Capturing Group(?:"[^"]*?")

"the literal " (34₁₀ / 42₈ / 22₁₆)

Negated Character Class[^"]*?

*?matches any number of characters outside the set below:

"the literal " (34₁₀ / 42₈ / 22₁₆)

;the literal ; (59₁₀ / 73₈ / 3B₁₆)

Global pattern flags

i modifier: insensitive. Matches without distinguishing uppercase and lowercase letters

g modifier: global. Finds all matches instead of stopping after the first

25 tokens

Regular Expression

(?:INSERT INTO|UPDATE|SELECT|DELETE)(?:[^;'"]|(?:'[^']*?')|(?:"[^"]*?"))+;

New

String query = "select * from users_table where username = '" +  u_username + "' and password = '" + u_password +"';";
String query2 = "select * from users_table where username = '" +  u_username + "' and password = '" + u_password +"'";
SQLiteDatabase db
//some un-important code here...
Cursor c = db.rawQuery( p_query, null );
return c.getCount() != 0;
}

Substitution

String query = "select * from users_table where username = '" +  u_username + "' and password = '" + u_password +"';";
String query2 = "select * from users_table where username = '" +  u_username + "' and password = '" + u_password +"'";
SQLiteDatabase db
//some un-important code here...
Cursor c = db.rawQuery( p_query, null );
return c.getCount() != 0;
}