Re: SQL update/insert for a string contain " ' "

["Prakash Harri" <pharri@xxxxxxxxx>]

Hi,
Java uses the \ as an escape character. So you have to do the same as in a
files path eg.
"c:\temp\test"  would be "c:\\temp\\test".

You should place all string fields in an escape char block . So to solve
your problem ( nb. the source for the quote method is below) :

String desc = getJTextFieldDesc().getText();
String update = "update myTable set DESCRIPTION = "+quote(desc)+"' where ID
= 1";

public static String quote(String param) {
 return "\'"+param+"\'";
}

From: "Xu, Weining" <Weining.Xu@AIG.com>
To: <JAVA400-L@midrange.com>
Sent: Thursday, October 04, 2001 3:07 PM
Subject: SQL update/insert for a string contain " ' "


> Hi, all,
>
> I am using JDBC to perform update/insert for DB2 on AS400.  The user types
> inputs from a Java GUI. For example, when user types in "Tom's desk" in a
> text field.  I will update the field with the typed string.  The partial
> code is like this:
>
> String desc = getJTextFieldDesc().getText();
>
> String update = "update myTable set DESCRIPTION = '"+desc+"' where ID =
1";
>
> stmt.createStatement();
> stmt.executeUpdate(update);
>
> The update will return error, since the string passed into SQL update
> statement would be 'Tom's Desk'.  The SQL hit the first closing "  '  "
> after letter m rather after letter k.
>
> Any solutions?  Thanks for your help.
>
> _______________________________________________
> This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
> To post a message email: JAVA400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
> or email: JAVA400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/java400-l.