Getparameter and then display a record--how?

[Raja Sagar Panamgipalli]

Hi Guys,

I'm kinda new to JDBC ...i haven't been able to resolve this problem ..ie..

Consider a html page that takes an employee name ...which through
form method =get action= \servletJdbcVlidation post the parameter to the servlet.
There in the servlet i have the code like follows...

 
package authenticate;
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.*;
import java.sql.*;
import oracle.jdbc.driver.OracleDriver;
    /**
 * <p>Title: </p>
 * <p>Description: </p>
 * <p>Copyright: Copyright (c) 2004</p>
 * <p>Company: </p>
 * @author Panamgipalli Raja Sagar
 * @version 1.0
 */
public class LoginValidate extends HttpServlet {
  private static final String CONTENT_TYPE = "text/html";
  //Initialize global variables
  public void init() throws ServletException {
  }
  //Process the HTTP Get request
  public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException,IOException {
    //UserName
    String vart = request.getParameter("t1");//get the input say empname...
    
    //Password
    String varp = request.getParameter("p1");
     
    Driver driver = new oracle.jdbc.driver.OracleDriver();
    
    String url = "jdbc :-o	 racle:thin:@localhost:1521 :-o	 racle81";
    
    try {
      
      DriverManager.registerDriver(driver);
      
      Connection con;
      
      con = DriverManager.getConnection(url, "scott", "tiger");
      
      Statement stmt = con.createStatement();
      
[B]  ResultSet rs = stmt.executeQuery("select passwd from employee where  username like"+ vart);[/B]
      while(rs.next()){
        System.out.println(rs.getString(1));
        }
     }catch(Exception e){
      e.printStackTrace();
    }
  }
  //Process the HTTP Post request
  public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
    doGet(request, response);
  }
  //Clean up resources
  public void destroy() {
  }
}
 

stmt.executeQuery("select passwd from employee where username like"+ vart);
how do i give the String stored in vart to the SQL statement...i dont get the trick in giving the syntax.
plz help.........
thankyou
regards
Sagar

[Jeanne Boyarsky]

Sagar,
To do an exact match, you need single quotes around the parameter.

stmt.executeQuery(
"select passwd from employee where username like '"+ vart + "');

Is the user passing in the wildcards in the like clause? If not, you may want to do:

stmt.executeQuery(
"select passwd from employee where username like '%"+ vart + "%');

That will return any matches containing the parameter, not just exact matches.