Question

Jsp中的SQL语句写法，高手进哦~~

各位好，我在jsp文件中定义了一个String的Sql语句，我想模糊查询关键字，如下：

String sql = "select * from record where ('"+choice+"' like '"+%gjz%+"') and date >= '"+sdate+"' and date <='"+edate+"' order by date ";

ResultSet rs=stmt.executeQuery(sql);......

但是报语法错？ '"+%gjz%+"' 这个写法错了吗？请问哪里错了？？？

PS：choice是列名 ，gjz是关键字，sdate是起始时间，edate是结束时间。
choice也是传递的参数哈。就是列名和关键字不确定哦。所以写成上面的形式

Answer 1

String sql = "select * from record where choice like '"+%gjz%+"' and date >= '"+sdate+"' and date <='"+edate+"' order by date ";

ResultSet rs=stmt.executeQuery(sql);
'"+%gjz%+"'没有错

Answer 2

String sql = "select * from record where ('"+choice+"' like '%"+gjz+"%') and date >= '"+sdate+"' and date <='"+edate+"' order by date ";
百分号的位置的问题吧 另外choice是不固定的列名吗，要是固定的不用写成参数吧

Answer 3

"select * from record where ('"+choice+"' like '"+%gjz%+"') and date
改成
"select * from record where ("+choice+" like '%"+gjz+"%') and date

这样就行了

Answer 4

String sql = "select * from record where choice like '"+%gjz%+"' and date >= '"+sdate+"' and date <='"+edate+"' order by date ";
我猜你那个choice不是传的参吧？