Need Explanation for a Simple Query

[vinoth]

Hi everybody.
I was developing a JSP page with a "Registration Form" in it.
Therefore I am supposed to store all the information that user provides into the Database.
I was trying to use "Prepared Statement", but my faculty told to use the following simple query. I used it and it worked. But I didn't understand it's meaning.
Pls explain the following query.
Here varibles are String data types.

insert into <table_name> values (' "+variable1+" ',' "+variable2+" ');

Thanks in advance.

[masijade]

It means exactly what it says. But I find it hard to believe that "faculty" told you to do something as error-prone, and possibly destructive, as that.

Essentially it is

insert into <table> values ('<var1>', '<var2'>)

[r035198x]

You need to read a database tutorial that explains SQL queries.
The insert should still have been done using a PreparedStatement.

[vinoth]

My doubt is why '+' and Double quotes symbols are used?

[r035198x]

When using sql, you use ' ' wrapped aroung text for character literals
e.g

insert into users(id,name) values (1, 'vinoth');

The characters need to have the quotes while the integer does not need them.

When writing the query in java you need to add those quotes too. Read about this in a SQL tutorial.



The + operator just adds the strings together the same way as it does in

String greetVinoth = "Hello " + "vinoth";

Or

String variable= "vinoth";
String greeting = "Hello " + variable;

Using the PreparedStatement takes away the need to add the ' ' around characters and this is one of the reasons why it should be prefered.

[Tolls]

It means exactly what it says. But I find it hard to believe that "faculty" told you to do something as error-prone, and possibly destructive, as that.

I don't...

[vinoth]

thank you very much.