Problem with SQL select

[shree vijay]

Hi, Here is a portion of my code:

          String str=
 "("+"'"+request.getParameter("username")+"'"+","+
 "'"+request.getParameter("password")+"'"+","+
 "'"+request.getParameter("rpassword")+"'"+","+  
 "'"+request.getParameter("emailid")+"'"+")";    
                     
  String findKey=request.getParameter("username");     
          out.println(request.getParameter("username"));      
          // Check whether the user name already exists 
          
          ResultSet r=s.executeQuery("SELECT user_Name FROM user_Details WHERE user_Name = *******");
          out.println(r.getString("user_Name"));
                    
          if (r.next()!= false)
          {           
             out.println(" UserName already exists !!! ");   
          }
          else
          {
              s.executeUpdate("INSERT INTO user_Details VALUES "+str); 
              out.println(" 1 row inserted ..........&&&&&");
          }        

In the location denoted by ****** in the SQL statement, I used findkey variable. This caused an error, I guess the SQL statement does not recognize the java variable. I also tried r.getString("user_Name") where r is my resultset. That didn't work too. I tried enclosing r.getString("user_Name") within <%= %> since this code is from a jsp file. That doesn't work too. What should I do?
------------------
Regards,
Shree

[Simon Brown]

I think I can see what you're asking ... have you tried the following?
ResultSet r=s.executeQuery("SELECT user_Name FROM user_Details WHERE user_Name = " + findKey);
instead of
ResultSet r=s.executeQuery("SELECT user_Name FROM user_Details WHERE user_Name = *******");
Regards
Simon
------------------
Simon Brown
Co-author of Professional JSP 2nd Edition

[Simon Brown]

Or, if user_name is a String on the database, you might need to do the following (notice the extra ' characters)...
ResultSet r=s.executeQuery("SELECT user_Name FROM user_Details WHERE user_Name = "'" + findKey + "'");

Originally posted by Simon Brown:
ResultSet r=s.executeQuery("SELECT user_Name FROM user_Details WHERE user_Name = " + findKey);

------------------
Simon Brown
Co-author of Professional JSP 2nd Edition

[shree vijay]

Thanks,Simon, it was a small nuance but I definitely missed it.