Passing JSP value into an SQL Query

Question

Hi,
I am developing a site for a cruise ship company as part of a project. My problem is as follows . . .
I have a page called cruiseReservation.jsp which passes the value of the selected cabin to the cruiseDetails.jsp page:
href="CruiseDetails.jsp?cabin_id=cabinE105 " so . .
cabinE105 was selected.
my database table for the cabin is as follows:
create table cabin (
cruise_id number primary key,
cabinE105 number,
cabinD113 number,
cabinC131 number,
cabinB127 number,
cabinA101 number,
FOREIGN KEY(cruise_id)
REFERENCES cruisedetails(cruise_id)
In the cruise details page im running the following code to update the cabin tables cabinE105 value to 0:
String cabin = request.getParameter("cabin_id");
String setCabin = "update cabin set '"+cabin+'" = 0 where cruise_id = 1";
What im trying to do is pass the value of the cabin into the update statement so it updates cabinE105 = 0 where cruise_id = 1.
How do I dfo this as the above method is not working ??
I would like any help on this PLEASE !!! THANKS !

Answer 1

String cabinID = request.getParameter("cabin_id");
PreparedStatement ps=connection.prepareStatement("update cabin set "+cabinID+"=? where cruise_id=?");
ps.setInt(1,0);
ps.setInt(2,0);
ps.executeUpdate();
.Regards
-John-