Java

Ms Access sql problem

•

Join Date: Jun 2004

Posts: 11

Reputation: teritori is an unknown quantity at this point

Solved Threads: 0

teritori

Offline

Newbie Poster

Ms Access sql problem

Aug 11th, 2004

hi everyone

-In the code below, the line marked by *** is where i read my text field.
-The value of the text field is stored into a variable "InputUserName ".
-My question is: What do i put in the place of @@@@@ so as to have the same variable "InputUserName " referenced.
- I want to search/query my db by whatever the user enters as his username.
i'm on jdk1.5.0

Thanx in advance

 Help with Code Tags 
 Java Syntax (Toggle Plain Text) 
Driver d = (Driver)Class.forName"sun.jdbc.odbc.JdbcOdbcDriver").newInstance();
String URL = "jdbc:odbc:" + "CMSC446"; 
con = DriverManager.getConnection( URL ,"",""); 
statement   = con.createStatement();
*** InputUserName = username.getText();	//reading the Text field
result = statement.executeQuery("SELECT password FROM terry 
WHERE username =@@@@@");
 
while(result.next())
{
    InputPassword = Inpassword.getText();      //reading password field
 
    String dbPassword = result.getString("password"); //obtaining db password
 
    if (dbPassword.equals(InputPassword))
    {			
       //aknowledge
    }
    else
   {
 
   }
}
Driver d = (Driver)Class.forName"sun.jdbc.odbc.JdbcOdbcDriver").newInstance();
String URL = "jdbc:odbc:" + "CMSC446"; 
con = DriverManager.getConnection( URL ,"",""); 
statement   = con.createStatement();
*** InputUserName = username.getText();	//reading the Text field
result = statement.executeQuery("SELECT password FROM terry 
WHERE username =@@@@@");

while(result.next())
{
    InputPassword = Inpassword.getText();      //reading password field
    							
    String dbPassword = result.getString("password"); //obtaining db password

    if (dbPassword.equals(InputPassword))
    {			
       //aknowledge
    }
    else
   {
        
   }
}

•

Join Date: Aug 2004

Posts: 153

Reputation: cosi is an unknown quantity at this point

Solved Threads: 1

cosi

Offline

Junior Poster

Re: Ms Access sql problem

Aug 12th, 2004

>>result = statement.executeQuery("SELECT password FROM terry
WHERE username =@@@@@");

just put it right in ;-)

 Help with Code Tags 
 Java Syntax (Toggle Plain Text) 
result = statement.executeQuery("SELECT password FROM terry 
WHERE username ="+InputUserName);
result = statement.executeQuery("SELECT password FROM terry 
WHERE username ="+InputUserName);

Just realise that executeQuery just takes in a String and you may compose Strings however way you want.
If InputUserName="cosi", then

"SELECT password FROM terry WHERE username="+InputUserName
equals
"SELECT password FROM terry WHERE username=cosi"

Only think you have to watch out for is you must encode your strings if you expect nonalphanumeric symbols. URLEncoder/URLDecoder is a cheap way to go about it...

An alternative strategy is to use PreparedStatements. (See http://java.sun.com/j2se/1.4.2/docs/...Statement.html)

 Help with Code Tags 
 Java Syntax (Toggle Plain Text) 
   PreparedStatement pstmt = con.prepareStatement("UPDATE EMPLOYEES
                                     SET SALARY = ? WHERE ID = ?");
   pstmt.setBigDecimal(1, 153833.00)
   pstmt.setInt(2, 110592)
   PreparedStatement pstmt = con.prepareStatement("UPDATE EMPLOYEES
                                     SET SALARY = ? WHERE ID = ?");
   pstmt.setBigDecimal(1, 153833.00)
   pstmt.setInt(2, 110592)