Syntax errors using sql and java

Question

Could somebody inform of the correct syntax for using UPDATE and INSERT SQL commands in a java program? Any information I can find demonstrates this with:
INSERT INTO table_name(column_name, ..., column_name)
VALUES(value, ..., value)
However - this isn't working? any suggestions - and I know its very basic, but I'm just learning.
String query = " INSERT INTO SESSIONS (" +                                   
                    "id,module_name, module_number, level, session " +
                    "term, class_list, location, lecturer" + ")
VALUES('"+
                    fields.id.getText() + "', '"+
                    fields.module_name.getText() + "', '" + fields.module_number.getText() + "', '" +
               fields.level.getText() + "', '" fields.session.getText() "', '" +
               fields.term.getText() + "', '" fields.class_list.getText() "', '" +
               fields.location.getText() + "', '" fields.lecturer.getText() "')";
          output.append( " \nSending query: " + connection.nativeSQL(query)+ "\n");                                                                                                         
          output.append( "query sent");     
thanks
          int result = statement.executeUpdate(query);                    

Answer 1

With all those quotes and apostrophes and string concatenations, I'd be surprised if you got it right by the fourth try. (By the way, you appear to have missed a comma between "session" and "term".) Are you planning to insert more than one record in your program? If so, you should consider using a PreparedStatement. This will likely run faster, and your program will definitely be easier to read. Also, you won't have to come back here later to ask how you deal with data that includes apostrophes (the notorious "O'Brien" problem). Here's how you do that... you define the PreparedStatement only once:
String query =
  "INSERT INTO SESSIONS (id,module_name, module_number, level, session, term, class_list, location, lecturer) " +
  "VALUES(?, ?, ?, ?, ?, ?, ?, ?, ?)";
PreparedStatement insert = connection.prepareStatement(query);and then every time you want to insert a record you do this:
insert.setString(1, fields.id.getText());
insert.setString(2, fields.module_name.getText());
// and so on...
insert.executeQuery();