Medium SQLI - COntroller class

SqliController.java

@Controller
public class SqliController {
    @Autowired
    private SqliModel sqliModel;

    @GetMapping("/home/{id}")
    public String home(@PathVariable String id, Model model) {
        List<Page> pages = sqliModel.getPage(id);
        model.addAttribute("page", pages.get(0));
        return "index";
      }
}

SqliModel.java

public List<Page> getPage(String pageId){
    String sql = "SELECT pageId, title, content FROM pages WHERE pageId="+pageId;
    List<Page> pages = jdbcTemplate.query(sql, (resultSet, rowNum) -> new Page(resultSet.getInt("pageId"),resultSet.getString("title"), resultSet.getString("content")));
    return pages;
}