How to insert records at run time?

[Abhimanyus singh]

Hi ...Guys..

As I new to JDBC...and don't know how to insert records in the table through a JDBC program...

Somehow i managed to get a code for inserting records in the table.....

But, my concern is regarding the line....

stm.executeUpdate("insert into abhi(Name,Phone_no)values('"+str+"', "+no+")");

I just need to understand that , what is the NEED of using too many '+' operators to embrace local variable "str" and "no" ???

regards.

import java.sql.*;
import java.io.*;

public class Jdbc2
        {
        public static void main(String args[]) throws IOException
                {
                Statement stm;  ResultSet reset;  

                BufferedReader buf = new BufferedReader(new InputStreamReader(System.in));

                 try   {

                        String str,str1; int no; 


                        Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");

                        Connection conect = DriverManager.getConnection("jdbc:odbc:stu_base");
                                                                                          
                        stm = conect.createStatement();

                        do
                                {

                                System.out.print("Enter Name ::::");

                                str=buf.readLine();

                                System.out.print("Enter the phone number ::::");

				str1=buf.readLine();					

                                no = Integer.parseInt(str1);

                                stm.executeUpdate("insert into abhi(Name,Phone_no)values('"+str+"', "+no+")");
 
                                System.out.print("DO YOU WANT TO ENTER MORE RECORDS::");

                                str=buf.readLine();

                                }  while(str.equals("no")==false);

                        conect.commit();

                        reset = stm.executeQuery("select * from abhi");

                        System.out.println("Name  "+"\t"+"Phone_no");

                        while(reset.next())
                                {
                                System.out.println(reset.getString("Name")+"\t"+reset.getInt("Phone_no"));
                                }
                         stm.close();   conect.close();
                         }
                        catch(SQLException sqe)
                                {
                                System.out.println("SQL ERROR");
                                }
                        catch(ClassNotFoundException cnf)
                                {
                                System.out.println("CLASS NOT FOUND ERROR ");
                                }
                             }
                          }

[Bear Bibeault]

Look into PreparedStatement.

[Abhimanyus singh]

Bear Bibeault wrote:Look into PreparedStatement.

It would be of great help , if you please...elaborate more regarding the PreparedStatement Interface, and let me know the reason for including so many "+" operators..!!!

Regards...

[Paul Clapham]

Even better... there's a professionally-written tutorial about JDBC, and it has a section about PreparedStatement. You can read it here: Lesson: JDBC Basics. Actually there's a lot of useful information in that tutorial, so it might be a good idea for you to work through the whole thing rather than just the PreparedStatement section.

[Wendy Gibbons]

Abhimanyus singh wrote:Hi ...Guys..

As I new to JDBC...and don't know how to insert records in the table through a JDBC program...

Somehow i managed to get a code for inserting records in the table.....

But, my concern is regarding the line....

stm.executeUpdate("insert into abhi(Name,Phone_no)values('"+str+"', "+no+")");

I just need to understand that , what is the NEED of using too many '+' operators to embrace local variable "str" and "no" ???

regards.

are you actually asking why are there the 4 '+' signs in that statement?

[chris webster]

Abhimanyus singh wrote:

Bear Bibeault wrote:Look into PreparedStatement.

It would be of great help , if you please...elaborate more regarding the PreparedStatement Interface, and let me know the reason for including so many "+" operators..!!!

Regards...

The "+" is nothing to do with JDBC, as it is simply used to concatenate strings together where you combine your literal SQL INSERT with the values in your variables to make one big SQL string. But this is the wrong way to do this anyway, as you should use bind variables here. Follow Paul's suggestion to find out more about using PreparedStatement and learning about JDBC.

[Abhimanyus singh]

Wendy Gibbons wrote:

Abhimanyus singh wrote:Hi ...Guys..

As I new to JDBC...and don't know how to insert records in the table through a JDBC program...

Somehow i managed to get a code for inserting records in the table.....

But, my concern is regarding the line....

stm.executeUpdate("insert into abhi(Name,Phone_no)values('"+str+"', "+no+")");

I just need to understand that , what is the NEED of using too many '+' operators to embrace local variable "str" and "no" ???

regards.

are you actually asking why are there the 4 '+' signs in that statement?

Yes !!!

[Wendy Gibbons]

I don't mean to be rude, but i think starting on jdbc may be a bit running before you can walk.
I am presuming this code is cut and pasted from someone else or somewhere else.

what the '+' signs are doing is adding strings together so

run this little snippet inside a main method

System.out.println("hello "+"world");
String a="left";
String b="right";
string c =a+":"+b;
System.out.println(c);

then look at that line in your code again, work out what it is doing.

[Abhimanyus singh]

Wendy Gibbons wrote:I don't mean to be rude, but i think starting on jdbc may be a bit running before you can walk.
I am presuming this code is cut and pasted from someone else or somewhere else.

what the '+' signs are doing is adding strings together so

run this little snippet inside a main method

System.out.println("hello "+"world");
String a="left";
String b="right";
string c =a+":"+b;
System.out.println(c);

then look at that line in your code again, work out what it is doing.

Hi..Thank you a Lot!!! I can't believe that, something was being missed out by me!! Though, I knew that SQL accepts single quoted STRINGS, but LATER, I came to know that the TWO + operators ,embracing the string variable, are placed to prepend and append it with single quotes !!!

Thanks again!!