Jstl sql limit offset param???

Question

there is an syntax error in this code
can you help me?
<sql:query var="studentList" scope="request">
SELECT * FROM student
WHERE fName LIKE ? AND
name LIKE ? AND
surname LIKE ? AND
lang LIKE ?
ORDER BY surname, name
LIMIT ? , 20
<sql:param value="%${param.firmname}%" />
<sql:param value="%${param.sName}%" />
<sql:param value="%${param.sSurname}%" />
<sql:param value="%${param.sLang}%" />
<sql:param value="${start}" />
</sql:query>

Answer 1

The problem is that you are telling the PreparedStatement that is being made using the
sql:update tag that there is only one parameter. Both by adding just one ? and
by using just one sql:param tag (which I believe has to be 1:1 with the ?s).
Anyway, in order for the PreparedStatement to know that there is going to be multiple
parameters, you have to pass the correct amount of ?s. If it will always be three, you
would use:
  <sql:update>
    update my set t=1 where id in(?,?,?)
    <c:forEach var="a" items="${paramValues.a}">
      <sql:param>${a}</sql:param>
    </c:forEach>
  </sql:update>But for the more likely case where you do not know how many ?s there will be, you would use
  <c:set var="aCount">
    ${fn:count(paramValues.a)}
  </c:set>
  <c:set var="sqlString">
    update my set t=1 where id in(
    <c:forEach begin="0" end="aCount">
    </c:forEach>
  </c:set>
  <sql:update>
    ${sqlString}
    <c:forEach var="a" items="${paramValues.a}">
      <sql:param>${a}</sql:param>
    </c:forEach>
  </sql:update>You might want to check out that c:forEach ... ?, It is untested, and I am not sure how the DB will handle the extra comma.
However, unless this same update, with the same number of parameters, is likely to occur multiple
times, you are gaining no benefit from using the PreparedStatement, and you are probably better off
going with the simpler Stament syntax you already used.
  <c:set var="a">
    ${fn:join(paramValues.a,",")}
  </c:set>
  <sql:update>
    update my set t=1 where id in(${a})
  </sql:update>