JDBC not returning proper result

Question

Hi
I am trying to extract some information from data base
and i am writting this query
java.sql.Statement s = dbCon.createStatement();
ResultSet r = null;
r = s.executeQuery("select * from emp where description="+courseName);
If the course have value
description="Fundamental of Science"
then it says "syntax error at or near of"
and if description="SAD"
then it said error "column "sad" does not exist
means its converting to lower case
where, i am accepting the string value for description from a JSP page,
i am returning the value in the bean by using get set method
and i am writing the query in bean
i have checked that its returning the value properly for the parameter "description"
Please help

Answer 1

The SQL you need is
select * from some_table where some_column = 'abc def'Note the single quotes around the string literal "abc def". If you don't have the quotes, then abc is taken as a column name or alias, and the def part is just wrong syntax at that point.
The way to do this is with PreparedStatement.
PreparedStatement ps = conn.prepareStatement("select * from some_table where some_column = ?");
String colValue = "abc def";
ps.setString(1, colValue);
ResultSet rs = ps.executeQuery();The driver puts the quotes in for you, and handles any escaping that's necessary.
Edited by: jverd on Dec 1, 2010 3:51 PM