error in update query

[preethi Ayyappan]

Hi
I am getting a variable in a string like

String state=m.group(1);

But if i try to store the state in the database like

  
 try  
 {  
 Class.forName  
                     ("com.mysql.jdbc.Driver").newInstance();  
                     conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/peopletech", "meetme", "meetme");  
                     st = conn.createStatement();   
                     st.executeUpdate("update aircel set state='"+state+"'  where extnum='"+ extnum +"'");  
 }  
 catch(Exception e)  
                 {  
                     e.printStackTrace();  
                 }  
     
  

I am getting the following error:

java.sql.SQLException: Syntax error or access violation message from server: "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Dialing''' at line 1"
at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:2001)
at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1168)
at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:1279)
at com.mysql.jdbc.MysqlIO.sqlQuery(MysqlIO.java:1225)
at com.mysql.jdbc.Connection.execSQL(Connection.java:2278)
at com.mysql.jdbc.Connection.execSQL(Connection.java:2225)
at com.mysql.jdbc.Statement.executeUpdate(Statement.java:1259)
at com.mysql.jdbc.Statement.executeUpdate(Statement.java:1205)
at com.example.servlets.Call2.doGet(Call2.java:239)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
at java.lang.Thread.run(Thread.java:619)

Here extnum is the variable i got from the table contacts in the database people .

I dont know why it happens?Any help would be appreciated

Thanks

[Swastik Dey]

What is the datatype of extnum in your table?

[Bauke Scholtz]

Use PreparedStatement all the way. It not only eases setting non-standard typed Java objects in your SQL, but it also saves you from SQL injection attacks and singlequote headaches.

Prepare here: http://java.sun.com/docs/books/tutorial/jdbc/basics/prepared.html

[preethi Ayyappan]

Thank you for your replies.I will try to use prepared statement. Then the datatype of extnum is varchar