Sql syntax in jsp

Question

Hey All!
Im trying ot use a a bean to select data from a table where email != ''
The funny thing is my code works in one couple of jsp/bean but not in another, even though it's the exact same code.
This works
The Bean:
String sql = "SELECT applicantid, firstname, lastname, dob, " +
"homestreet, homestate, homecity, homezip, " +
"email, college, major, standing, " +
"graddate, schstreet, schcity, schstate, " +
"schzip, schphone, resOne, resTwo, " +
"resThree, waiver, bioletter, password, " +
"homephone " +
"FROM apptest " +
"WHERE " + filter + " " +
"ORDER BY " + orderBy;
The filter is the String "email != ''" and orderBy ="lastname"
Works perfectly!
But when I use similar code for another table
Code:
String sql = "SELECT providerid, applicantid, pin, title, " +
"company, firstname, lastname, phone, " +
"email, recletter " +
"FROM provtest " +
"WHERE " + filter + " " +
"ORDER BY " + orderBy;
with filter as "email != '' " and orderBy = "lastname"
I get the following error:
Error in findRecords ProviderUtility(Syntax error or access violation, message from server: "You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1")
Keep in mind that email != '' (these are single quotes)
I am really baffled.
Ike

Answer 1

"The funny thing is my code works in one couple of jsp/bean but not in another, even though it's the exact same code."
If it's EXACTLY the same code, what did you need another bean for?
If you needed a new bean, then it's not exactly the same.
Why aren't you using PreparedStatement to escape strings and dates for you?
Believe the engine when it tells you there's a mistake.
%