Java.sql: select decode...

Question

Hi everybody,
Suppose I have a database connection called conn. (The db is connected to mysql),
(String binNumber) is the encrypted string,
"pass" is the password:
stmt = conn.createStatement();
String s = "select decode (" + binNumber + ",pass)";
rs = stmt.executeQuery(s);
When ran the code containing the above code, received the run time error:
"SQLException: Syntax error or access violation, message from server: ..."
Does anybody have any idea what am I doing wrong? Does anybody know how should I execute a "select decode" statement?
Any help is greatly appreciated.

Answer 1

1) use a PreparedStatement
2) if you don't want to do 1, use quotes
String s = "select decode ('" + binNumber + "','pass')";That tells the database that the value is a string.