Problem in updating record

[Arun Bansal]

Hi friends, i'm new one to java. i'm trying to update a table data by taking input from user at runtime but when i'm running my code it is accepting only one value and rest two it is showing wrong.
my code is below here. I'm using myeclipse and Mysql.

package Connectivity;

import java.io.*;
import java.sql.*;

public class UpdateData implements DBString {

	/**
	 * @param args
	 */
	public static void main(String[] args) throws IOException {
		// TODO Auto-generated method stub
		Connection con1;
		Statement st1;

		show();
				try {
			Class.forName(driver).newInstance();
			con1 = DriverManager.getConnection(url, username, pass);
			System.out.println("Conneted now");
			st1 = con1.createStatement();
			System.out.println("Enter Employee id to update record");
			BufferedReader br = new BufferedReader(new InputStreamReader(
					System.in));
			String str = br.readLine();

			System.out.println("Enter New Values");
			System.out.println("name");
			String str1 = br.readLine();
			System.out.println("age");
			int str2 = (int) br.read();
			System.out.println("Enter place");
			String str3 = br.readLine();
			String query1 = "Update test set name='" + str1 + "',age=" + str2
				+ ",place='" + str3 + "' where id='" + str + "'";
						
			
			int i = st1.executeUpdate(query1);
			if (i > 0)
				System.out.println("Record Updated and number of rows updated: "+i);
			else
				System.out.println("Record not Updated");
			con1.close();
		} catch (InstantiationException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (IllegalAccessException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (ClassNotFoundException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (SQLException e) {
			e.printStackTrace();
		}
		show();
	}

	public static void show() {
		Connection con;
		Statement st;
		ResultSet rs;
		try {

			Class.forName(driver).newInstance();
			con = DriverManager.getConnection(url, username, pass);
			System.out.println("conneted now");
			st = con.createStatement();
			String query = "Select * from test";
			rs = st.executeQuery(query);
			while (rs.next()) {
				System.out.println("Id: " + rs.getString(1) + " Name:"
						+ rs.getString(2) + " Age: " + rs.getString(3)
						+ " Place: " + rs.getString(4));
			}
			con.close();
			System.out.println("Disconnected");

		} catch (InstantiationException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (IllegalAccessException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (ClassNotFoundException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}

}

this is what happeing when i'm running this.

conneted now
Id: a101 Name:arun Age: 25 Place: delhi
Id: a102 Name:tarun Age: 26 Place: mumbai
Id: a110 Name:varun Age: 26 Place: rohini
Id: a124 Name:karun Age: 26 Place: ashok vihar
Id: a451 Name:arun Age: 50 Place: delhi
Id: a457 Name:ankit Age: 27 Place: rohini
Id: s101 Name:arvind Age: 26 Place: delhi
Disconnected
Conneted now
Enter Employee id to update record
s101
Enter New Values
name
acs
age
25
Enter place
Record Updated and number of rows updated: 1
conneted now
Id: a101 Name:arun Age: 25 Place: delhi
Id: a102 Name:tarun Age: 26 Place: mumbai
Id: a110 Name:varun Age: 26 Place: rohini
Id: a124 Name:karun Age: 26 Place: ashok vihar
Id: a451 Name:arun Age: 50 Place: delhi
Id: a457 Name:ankit Age: 27 Place: rohini
Id: s101 Name:acs Age: 50 Place: 5
Disconnected

Table Structure

Field   Type     
id      varchar(5) 
name    varchar(25) 
age     int(3) 
place   varchar(20)

Any response is appriciated.
Thanks

[Rob Spoor]

When you're calling br.read() this will read one char. This will be the 2, which has an ASCII value of 50. This is why you're getting 50. It also explains why the place becomes 5; after reading the 2, the br.readLine() call after that returns the 5. The actual place you need to enter is skipped because of this.

Simply change the int str2 = (int) br.read(); line into this:

int str2 = Integer.parseInt(br.readLine());

Also, you should check out PreparedStatement. Your code has a potential for SQL injection. If someone enters ';DELETE FROM test;UPDATE test SET name=' as the name, the query becomes this:
Update test set name='';DELETE FROM test;UPDATE test SET name='',age=25,place='delhi' where id='s101'In other words: clear the names of all records, then delete all records, then try to update a non-existing record. With PreparedStatement this is prevented.