Question

如何将 JAVa中的 String类变量嵌入SQL查询语句中...?

<%String str = "";
if(session.getAttribute("b") != null){
str = (String)session.getAttribute("b");
byte c[]=str.getBytes("ISO-8859-1");
String strs=new String(c);
out.print(str );
}
Statement stmt=conn.createStatement();

ResultSet rs=stmt.executeQuery("select * from student");
while(rs.next())
{

String c="\t"+rs.getString("no")+"\t"+rs.getString("name")+"\t"+rs.getString("sex")+"\t"+rs.getString("profesion")+"\t"+rs.getString("grade")+"\t"+rs.getString("class");
%>
<h3><%=c%></h3>

Answer 1

PreparedStatement pstm = conn.PreparedStatement("select * from t where t.name=?");

pstm.setString(1, "myName");

rs = pstm.executeQuery();

Answer 2

String sql = "select * from table_name where colmn_name = '"+yourname+"'";
ResultSet rs=stmt.executeQuery(sql);

Answer 3

别在界面写代码....很多公司里面是不允许这种情况的..