Prepared Statement in MS Access

Question

Hi,
I want to pass a string value for a SELECT statement like this for MS Access:
/** Get the connection */
getConnection();
if (tableName.equals("Confidential_Data")) {
pstmt = conn.prepareStatement("select emp_no, emp_name, project_name from " + tableName + " where emp_name like ?");
try {
pstmt.setString (1, empname);
rs = pstmt.executeQuery();
while (rs.next()) {
Vector row = new Vector();
if (tableName.equals("Security_Data")) {
row.add(Long.toString(rs.getLong(1)));
row.add(rs.getString(2));
row.add(rs.getString(3));
rowData.add(row);
rs.close();
pstmt.close();
closeConnection();
...But no data is fetched.
When I run the query in MS Access by providing the string argument, it gives out result.
Am I missing something?
Any help is appreciated.
Thanks in advance.
Rajeev.

Answer 1

pstmt = conn.prepareStatement("select emp_no,
emp_name, project_name from " + tableName + " where
emp_name like ?");Set the tableName variable up as a PreparedStatement parameter too. So, instead of above, you'd have:
  pstmt = conn.prepareStatement("select emp_no, emp_name, project_name from ? where emp_name like ?");
  pstmt.clearParameters();
  pstmt.setString(1, tablename);
  pstmt.setString(2, emp_name);