SQL statement working in one class but not another

[Dcalladi]

Hi i have this SQL statement

ResultSet rs = conn.createStatement().executeQuery("SELECT * FROM Users Where "+searchType+" = '"+searchText+"'");

and this error
SQLException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Name = 'Danny'' at line 1

searchType can be First Name or Second name from a Combo box using String searchType = (String) Cbsearchby.getSelectedItem();
and searchText something type in by user take using getText

yes i have the exact same line in another class that works fine any pondering on the situation?

Thanks

[Junky]

Use a PreparedStatement instead.

[Dcalladi]

can you use Prepared-statement for Query

[Junky]

Did you read about it in the Java API?

[Dcalladi]

yes i was sure that they only use them for update or insert statements