Handling special character in HQL

[Jigar Naik]

Hi,

I am building HQL dynamically as below.

    if(holdOverSearchCriteriaTO.getTheatreCity() != null){
                queryBuffer.append(" AND vw.theatreCity = '"
                        + holdOverSearchCriteriaTO.getTheatreCity() + "'");
            }

But the problem i am facing is that the thatre city contains one single quote because of which my HQL is not getting build correctly.

AND vw.theatreCity = 'SANTA BARBARA D'OESTE'

Is there any way to handle this situation instead of manually escaping single quote ?

[Claudiu Chelemen]

Hi there,

First off, I don't think it's a good idea to concatenate holdOverSearchCriteriaTO.getTheatreCity() like this, wouldn't you rather be on the safe side and use bind parameters ?
Secondly, for the question at hand, you may use the escapeSql method from StringEscapeUtils to escape the problematic characters.

Cheers,
Claudiu

[Jigar Naik]

Thanks a lot.