Getting error message CT bad param: invalid matrix

Question

When we try to print this form in Reader 9 or X, we're getting the CT bad param: invalid matrix error message. Any thoughts on what's causing this and how to fix it?
Thanks,
MDawn

Answer 1

java.sql.SQLException: ORA-00904: "SANDY": invalid identifier
Looks like the sql you are submitting is invalid.
Print out a copy of the sql you are trying to run and you will probably get:
SELECT * FROM OURUSERS WHERE usr = Sandy and password = secretThat isn't valid sql. It is missing quotes around the values you are checking.
This is the corrected sql query:
SELECT * FROM OURUSERS WHERE usr = 'Sandy' and password = 'secret'so one solution would be:
String sql = "SELECT * FROM OURUSERS WHERE usr = '" + user + "' and password = '" + pwd + "' ";However that is not optimal. It exposes your code to sql injection attack.
The better way is to use a prepared statement:
String sql = "SELECT * FROM OURUSERS WHERE usr = ? and password =?";
st = con.prepareStatement(sql);
st.setString(1, user);
st.setString(2, password);
rs = st.executeQuery();cheers,
evnafets