No What I meant was using the JDBC prepared statement. here an example:
String[] vals = request.getParameterValues("checkbox");
try {
PreparedStatement pStmt = conn.prepareStatement("Insert into table (field) values (?)");
for (String val : vals) {
pStmt.setString(1, val);
pStmt.execute();
}
} catch .....
of course replacing checkbox, table, and field with the real things.
Java Programmer and Sun Systems Administrator
----------------------------------------------
Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it.
--Brian Kernighan