Adding parameter on select statement

[Caleb Jhay]

Hi Guys I just want to ask how can i put my parameter to my quere please see the code below

                     Statement stmt = con.createStatement();
                    String listItems = ("select * from SRC_AD_USERS where USER_NAME ='<request.getParameter(a)>");
                    ResultSet rs = stmt.executeQuery(listItems);
                    System.out.println(listItems);
                    String usernames = ""; 

Best Regards,

[anirudh jagithyala]

you can also try the concept of prepared statement

 PreparedStatement stmt = con.cprepareStatement("select * from SRC_AD_USERS where USER_NAME ='?' ");   
                    stmt.setString(1,request.getParameter());
                    ResultSet rs = stmt.executeQuery();   
                    //System.out.println(listItems);   
                    String usernames = "";   

i am not clear with the question, might be this would help....

[Caleb Jhay]

anirudh jagithyala wrote:you can also try the concept of prepared statement

 PreparedStatement stmt = con.cprepareStatement(("select * from SRC_AD_USERS where USER_NAME ='?' ");   
                    stmt.setString(1,request.getParameter());
                    ResultSet rs = stmt.executeQuery();   
                    //System.out.println(listItems);   
                    String usernames = "";   

i am not clear with the question, might be this would help....

Thank you for your quick reply but im getting error with the parenthesis. Kinda new with this stuff

Regards

[anirudh jagithyala]

hey Caleb,
where are you getting the errors.... Isit for your code or the code which i gave
Did you try the code with prepared statement..

please ellaborate

[Caleb Jhay]

anirudh jagithyala wrote:hey Caleb,
where are you getting the errors.... Isit for your code or the code which i gave
Did you try the code with prepared statement..

please ellaborate

I tried your code but the problem is java is asking me to put another parenthesis at the end of the PreparedStatement (see the bold parenthesis below.) Java is telling me that i need to put another one of that at the end

PreparedStatement stmt = con.cprepareStatement(("select * from SRC_AD_USERS where USER_NAME ='?' ") [b])[/b];  

Thanks again

[Caleb Jhay]

Hey buddy thank you for your help I got the idea and it is working ok now.

[Jan Cumps]

Caleb Jhay wrote:

anirudh jagithyala wrote:hey Caleb,
where are you getting the errors.... Isit for your code or the code which i gave
Did you try the code with prepared statement..

please ellaborate

I tried your code but the problem is java is asking me to put another parenthesis at the end of the PreparedStatement (see the bold parenthesis below.) Java is telling me that i need to put another one of that at the end

PreparedStatement stmt = con.cprepareStatement(("select * from SRC_AD_USERS where USER_NAME ='?' ") [b])[/b];  

Thanks again

Don't wrap quotes around a parameter:

"select FIELD_NAME from SRC_AD_USERS where USER_NAME = ?"