JSP and MySql question

[Joe Broderick]

Hello,
I can display everything from a table to a jsp, but if i want to only display some of the data based on a query, how can I do that? I tried to pass a string from the jsp to the bean which is connected to the database, but it does not work.

public ResultSet viewQuery( String subject ) throws SQLException, Exception{
ResultSet rst = null;
try{
String queryString = ("select " + subject + "from Post;");
Statement stmt = con.createStatement();
rst = stmt.executeQuery(queryString);
}
catch (SQLException sqle){
error="SQL Exception";
}
catch (Exception e){
error="An exception occured";
}
return rst;
}

[Rajagopal Sundarrajan]

Hi Joe
Try this:
String queryString = ("select " + subject + " from Post");

[Lasse Koskela]

Originally posted by Joe Broderick:
String queryString = ("select " + subject + "from Post;");

I would also remove the ";" from the query string.

[Joel McNary]

This depends on the DB, but in general the ';' should not be a problem.
I suggest using error = sqle.getMessage() to see the actual error being returned by the DB. That will be quite informative in determining the error. LIkewise, use error = e.getMessage()
Also, is this code just testing the ability to query the DB? It seems as though it will return one column of all records in the table. Perhaps you meant in your queryString:
"select * from Post where SUBJECT = " + subject
And remember, if SUBJECT is a varchar, you have to enclose your subject variable with single quotes:
"select * from Post where SUBJECT = '" + subject + "'"

[Monsieure Scaramouche]

Simple :
String queryString = ("select " + subject + "from Post;");
=>>>>
String queryString = ("select " + subject + " from Post;");
"from" shouldbe preceded by a space.
Thanks
-M

Originally posted by Joe Broderick:
Hello,
I can display everything from a table to a jsp, but if i want to only display some of the data based on a query, how can I do that? I tried to pass a string from the jsp to the bean which is connected to the database, but it does not work.

public ResultSet viewQuery( String subject ) throws SQLException, Exception{
ResultSet rst = null;
try{
String queryString = ("select " + subject + "from Post;");
Statement stmt = con.createStatement();
rst = stmt.executeQuery(queryString);
}
catch (SQLException sqle){
error="SQL Exception";
}
catch (Exception e){
error="An exception occured";
}
return rst;
}

[Lasse Koskela]

Btw. I get cold chills when I see people concatenating SQL strings... I always use PreparedStatement, which provides a safe way to construct the query dynamically.

[Ken Januski]

Lasse,
Perhaps you could give an example of PreparedStatement, though I realize this is veering a little off topic.
Ken

[Ken Januski]

Oops, never mind. I use them all the time but mistakenly thought you must be referring to something far fancier.
Must be time to log off.