JSP Issues Converting Timestamps Correctly

Question

I am pulling a timestamp from a DB2 database that has the date and time. When I pull the timestamp using the toString() function, it only gives me the year, month, and day, and dropping the time.
I initialize the SQL, and create the connection to the database in the first few lines, then read the date. It is the 4th item I am querying. There is a lot more to the code, but is a bit confusing. I altered it to be a bit more concise just to draw the gist of what I am trying to do.
The account number (dsrc_acct) is a parameter that is passed into the JSP, and pulls back relevant information:
String tSql = "select a.entity_id, a.first_name || ' ' || a.last_name, coalesce(c.addr1, '') || coalesce(', ' || c.addr2, '') || coalesce(', ' || c.city, '') || coalesce(', ' || c.state, '') || coalesce(', ' || c.country, '') || coalesce(', ' || c.postal_code, ''), d.txn_timestamp from name a, dsrc_acct b, address c, gem_event d where a.dsrc_acct_id = b.dsrc_acct_id and b.dsrc_acct_id = c.dsrc_acct_id and b.dsrc_acct = '" + request.getParameter("dsrc_acct") + "'";
int tRowCount = 0;
Statement dataCmd = null;
ResultSet conRS = null;
dataCmd = conn.createStatement();
conRS = dataCmd.executeQuery(tSql);
if ((conRS != null) && (conRS.next()))
out.print ("<table border = '0' width = 1850px>");
ResultSetMetaData rsmd = conRS.getMetaData();
int numberOfColumns = rsmd.getColumnCount();
Object dbField = null;
out.print ("<td><p align='right'><b>Transaction Reference Number: </b>" + request.getParameter("dsrc_acct") + "<br><b>Transaction Send Date/Time: </b>");
dbField = conRS.getObject(4);
out.print (dbField.toString() + " ");
out.print ("</p></td></table>");
Edited by: jjcheng2 on Oct 26, 2009 2:06 PM

Answer 1

i get this error when i try to compile:
JSPG0049E: /EventListWC.jsp failed to compile : JSPG0091E: An error occurred at line: 114 in the file: /EventListWC.jspJSPG0093E: Generated servlet error from file: /EventListWC.jsp C:\progra~1\IBM\Entity_Resolution\was_ee\profiles\DefaultProfile\temp\DefaultNode\server1\ibm-db2-eas-visualizer\eas-visualizer-client.war\_EventListWC.java:137: cannot resolve symbolsymbol : class SimpleDateFormat location: class com.ibm._jsp._EventListWC SimpleDateFormat sdf = new SimpleDateFormat("dd/MM/yy HH:mm:ss"); ^JSPG0091E: An error occurred at line: 114 in the file: /EventListWC.jspJSPG0093E: Generated servlet error from file: /EventListWC.jsp C:\progra~1\IBM\Entity_Resolution\was_ee\profiles\DefaultProfile\temp\DefaultNode\server1\ibm-db2-eas-visualizer\eas-visualizer-client.war\_EventListWC.java:137: cannot resolve symbolsymbol : class SimpleDateFormat location: class com.ibm._jsp._EventListWC SimpleDateFormat sdf = new SimpleDateFormat("dd/MM/yy HH:mm:ss"); ^2 errors
Line 114 is when I initialize the SimpeDateFormat.
I m not quite sure what a SQL Injection vulnerability is.