SQL Query works in workbench but gives syntax error in java

问题

I ran the query in both sql Workbench and in the executeUpdate() method in java:

in Workbench:

INSERT INTO recentsearches (name) VALUES ("blah");

in java:

statement.executeUpdate("INSERT INTO recentsearches (name) VALUES (\""+name+"\""));

Assuming name = "blah". But I get a syntax error from running the query in java, I've already checked the string value for name. It definitely comes up as "blah", and I didn't forget the speech marks around string values, yet I still get a syntax error.

The error I get in my console is:

check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

回答1:

Try to use:

"INSERT INTO recentsearches (name) VALUES("+name+")"; 

My advice, use PreparedStatement because it has:

-Precompilation and DB-side caching of the SQL statement leads to overall faster execution and the ability to reuse the same SQL statement in batches.

-Automatic prevention of SQL injection attacks by builtin escaping of quotes and other special characters. Note that this requires that you use any of the PreparedStatement setXxx() methods to set the values

来源：https://stackoverflow.com/questions/29348428/sql-query-works-in-workbench-but-gives-syntax-error-in-java