missing equal sign

[Aniruddha Dhar]

import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
import java.sql.*;

public class modify4 extends HttpServlet
{
	public void doPost(HttpServletRequest req,HttpServletResponse res)throws ServletException,IOException
	{
		doGet(req,res);
	}

	public void doGet(HttpServletRequest req,HttpServletResponse res)throws ServletException,IOException
	{
		res.setContentType("text/html");
		PrintWriter pw=res.getWriter();
		try
		{
			HttpSession ses=req.getSession();
			
			String ser=(String)ses.getAttribute("serial");
			String name=(String)ses.getAttribute("name");
			String mobile=(String)ses.getAttribute("mobile");
			String home=(String)ses.getAttribute("home");
			String office=(String)ses.getAttribute("office");
			String fax=(String)ses.getAttribute("fax");
			
			Class.forName("oracle.jdbc.OracleDriver");
			Connection con=DriverManager.getConnection("jdbc:oracle:thin:@localhost:1000:XE","system","12345");
			PreparedStatement pst=con.prepareStatement("update known set name='"+name+"' where serial="+ser);
			int t=pst.executeUpdate();
			int n=t;
			pst=con.prepareStatement("update phonenumber set name='"+name+"',mobile="+mobile+",home="+home+",office="+office+",fax="+fax+" where serial="+ser);
			t=pst.executeUpdate();
			n+=t;
			
[color=darkblue]/*problem= SQLException RA-00927: missing equal sign

pst=con.prepareStatement("update address set name='"+name+"',c/o='"+req.getParameter("n3")+"',village='"+req.getParameter("n4")+"',postoffice='"+req.getParameter("n5")+"',district='"+req.getParameter("n6")+"',state='"+req.getParameter("n7")+"',pin="+req.getParameter("n8")+" where serial="+ser);
			t=pst.executeUpdate();

*/[/color][size=18] [/size]
			n+=t;
			if(n>=3)
				pw.println("Update Successful.");
			else
				pw.println("Update Failed.");
			con.close();
		}
		catch(Exception e){pw.println(e);}
	}
}

i am new at this and trying to understand different things.can't get this one right.please help....
thanks in advance...

[Jeanne Boyarsky]

Try putting a System.out.println() that writes out the sql and run it against the sql command line. This will tell you which part of the SQL has an error.

Also, consider using a Prepared Statement so you don't have so much string concatenation and the query is safer.

[Bill Clar]

Is "c/o" a valid database field name?

[Rob Spoor]

It is if you enclose it properly. MS SQL Server and Access use [], MySQL uses ``, most others use "".