String sql = "SELECT c_process_def_id, c_processid FROM app_fd_bill WHERE c_bill_number = ?";
                stmt = con.prepareStatement(sql);
                stmt.setString(1, billNo);
                rs = stmt.executeQuery();

I need to get values of c_process_def_id, c_processid because these are needed for 
assignmentReassign(processDefId, processId, activityId, username, user);
where
c_process_def_id = Accounts#70#bill_management
and  
processId= 2602_Accounts_bill_management.
stmt.setString(1, billNo); billNo=2

I'm doing this outside process, so I'm storing the values in the database instance, but when I execute these values i get error

ERROR 06 Dec 2024 12:12:31 org.joget.apps.app.service.SqlFilterAspect - Possible SQLi from IP:0:0:0:0:0:0:0:1. Query string is _action=submit&OWASP_CSRFTOKEN=D8YK-063H-WJGC-PRLX-Y2PJ-EAC7-DLK0-THNZ
4794
java.sql.SQLException: Possible SQLi from IP:0:0:0:0:0:0:0:1. Query string is _action=submit&OWASP_CSRFTOKEN=D8YK-063H-WJGC-PRLX-Y2PJ-EAC7-DLK0-THNZ