Question

String sql="select * from "+tableName+" where user='"+user+"' and pwd='"+pwd+"';

哪里错了，字符串未用双引号正确引起来，我知道少了个双引号，但是应该加到哪里好，或者把这句话换成另外一个查询语句

Answer 1

String sql = "SELECT *FROM user WHERE name ='" + name + "'AND pwd = '" + pwd + "'";