Database escape char.

[claude favre]

Hello,
Is there a function in java similar to the php "stripslashes" function or do I have to parse the string myself before inserting a record to mysql?
Thank you.
claude

[Jamie Robertson]

what does the "stripslash" function in PHP do?
If you are worried about special characters, then use the prepared statement because it deals with special characters internally.
Jamie

[claude favre]

It basically deal with special char in text such O'brien, it would in this example escape the apostrophe.
Claude

[Jamie Robertson]

Use a preparedStatement instead of a statement then. It handles the database special characters for you.
This works with prepared statement:

String val = "O'Brien";
PreparedStatement ps = con.prepareStatement("select * from emp where emp_fname = ?");
ps.setString(1, val);
ResultSet r  = ps.executeQuery();

where as it throws a SQLException when using Statement:

String val = "O'Brien";
Statement ps = con.createStatement();
ResultSet r  = ps.executeQuery("select * from emp where emp_fname = '" + val + "'");

SQLException: [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'emp_fname = 'O'Brien''.

Jamie