How to use variables in an sql select statement.

Question

Hi, I have seen examples using the update, but nothing using a select statement.
I have four variables I am getting from drop down menus in my JSP I set the user selected items to strings.
How would I create the select statement like this:
.String XName = request.getParameter("UserInputX");
rsInResult = stmtInResult.executeQuery("SELECT ColumxX FROM TableZ WHERE ColumnX = XName")Obviously it tries to read "XName" as a column and of course can't find it, how would I set it up to have it see the Value of XName and not the literal XName.

Answer 1

read this:
rsInResult = stmtInResult.executeQuery("SELECT ColumxX FROM TableZ WHERE ColumnX = '"+XName+"')
{code}
better way is PreparedStatement:
{code}
     // example code to change password to an user in the USERS table
     String newPWD = "my password";
     String user = "luxjava";
     PreparedStatement prepStat;
     String updatePWD = "UPDATE LOGISTIC.USERS "+
                              "SET logistic.users.password = ? "+
                              "WHERE logistic.users.username = ?";
     prepStat = ql.conDb.prepareStatement(updatePWD);
     prepStat.setString(1, newPwd);
     prepStat.setString(2, user);
     int zeroNotFound = prepStat.executeUpdate();
     if (zeroNotFound==0)
          ql.conDb.rollback();
          prepStat.close();
     else
          ql.conDb.commit();
          prepStat.close();
{code}
... use the SQLException to capture errors