problem in updating a string variable in database

[preethi Ayyappan]

Hi,
I am getting the output

causetxt='Normal , unspecified'

when i run my java program. I am storing

causetxt='Normal , unspecified'

in a variable "cause".I need to save the value 'Normal,unspecified' in the database table in the column causetxt.But i am unable to store it.when i tried to update this string in the database by using the following query

  
st.executeUpdate("update queue set causetxt="+ cause +" where extension='5101'");
  

Instead of causetxt='Normal , unspecified',the value 0 is updated in the column causetxt .Am i doing anything wrong?please assist me to do this.

Thanks

[Vinoth Thirunavukarasu]

Just update your code
st.executeUpdate("update queue set causetxt=/""+ cause +"/" where extension='5101'");

[Navin Loganathan]

try using this...i have jus added the single quotes before n after cause the double quotes for cause....
st.executeUpdate("update queue set causetxt='"+cause+"' where extension='5101'");

[harilal ithikkat]

i think your code is not secure
PLease go through this article

[Navin Loganathan]

ya true......thnx for the info,,,,,
but it can be used when thr are no quotes within the string

[Jan Cumps]

harilal ithikkat has already pointed you to the right solution.

Follow the link he provided, read the section "Using Parameterized Statements" and apply it in your code.
It will work.

Regards, Jan

[Campbell Ritchie]

Navin Loganathan, welcome to JavaRanch

Please don't use abbreviations like "thnx" or "thr"; read this for an explanation.