diff --git a/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLCommandCondition.java b/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLCommandCondition.java
index 4f78ddc4a..0047a6b24 100644
--- a/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLCommandCondition.java
+++ b/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLCommandCondition.java
@@ -20,5 +20,5 @@ package org.apache.fineract.infrastructure.security.utils;
 
 public interface SQLCommandCondition {
 
-    boolean checkCondition(String command, String sql);
+    boolean checkCondition(String sql, String command);
 }
diff --git a/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLInjectionValidator.java b/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLInjectionValidator.java
index ec8dd9701..75ebcb027 100644
--- a/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLInjectionValidator.java
+++ b/fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLInjectionValidator.java
@@ -144,7 +144,7 @@ public final class SQLInjectionValidator {
 
     private static void validateSQLCommand(String lowerCaseSQL, String[] commands, SQLCommandCondition condition) {
         for (String command : commands) {
-            if (condition.checkCondition(command, lowerCaseSQL)) {
+            if (condition.checkCondition(lowerCaseSQL, command)) {
                 throw new SQLInjectionException();
             }
         }