Re: SQL update/insert for a string contain " ' "

["Bruce Jin" <brucej@xxxxxxxxxxxxxxxxxxxx>]

 Weining:
 You should use two single quote instead of a double quote. .replace() will
not work. But the preparedStatement is a better way to do this. See Fred
Kulack' post for details. Basically it is like this:

 pstmt = conn.prepareStatement(" UPDATE BRUCELIB.LIBLIST SET ODLBNM = ?
WHERE ODOBNM = 'ALLYO'");
 String desc = "Tom' desk";
 pstmt.setString(1, desc);
 pstmt.executeUpdate();

Bruce

----- Original Message -----
From: "Xu, Weining" <Weining.Xu@AIG.com>
To: <java400-l@midrange.com>
Sent: Thursday, October 04, 2001 7:36 AM
Subject: RE: SQL update/insert for a string contain " ' "


> Thanks, Bruce,
>
> Using two single quote works.  But that means I have to scan all text
fields
> that user could input, then to parse the text if single quote was found.
Do
> you know any efficient ways to do this parse?  I tried to use
> replace(oldChar, newChar) method.  But I got the same problem by doing
this,
> i.e.
> desc = desc.replace(''', '''');
> The method can not get the right closing single quote.
>
> -----Original Message-----
> From: Bruce Jin [mailto:brucej@mrc-productivity.com]
> Sent: Thursday, October 04, 2001 11:54 AM
> To: java400-l@midrange.com
> Subject: Re: SQL update/insert for a string contain " ' "
>
>
>  Hi Xu Weining;
>  One way to do this is to parse the text before update. For single quote,
> you have to make it double quote. Like this "Tom''s desk". This string
will
> be sent to database as "Tom's desk".
>
> Bruce
>
> ----- Original Message -----
> From: "Xu, Weining" <Weining.Xu@AIG.com>
> To: <JAVA400-L@midrange.com>
> Sent: Thursday, October 04, 2001 6:07 AM
> Subject: SQL update/insert for a string contain " ' "
>
>
> > Hi, all,
> >
> > I am using JDBC to perform update/insert for DB2 on AS400.  The user
types
> > inputs from a Java GUI. For example, when user types in "Tom's desk" in
a
> > text field.  I will update the field with the typed string.  The partial
> > code is like this:
> >
> > String desc = getJTextFieldDesc().getText();
> >
> > String update = "update myTable set DESCRIPTION = '"+desc+"' where ID =
> 1";
> >
> > stmt.createStatement();
> > stmt.executeUpdate(update);
> >
> > The update will return error, since the string passed into SQL update
> > statement would be 'Tom's Desk'.  The SQL hit the first closing "  '  "
> > after letter m rather after letter k.
> >
> > Any solutions?  Thanks for your help.
> >
> > _______________________________________________
> > This is the Java Programming on and around the iSeries / AS400
(JAVA400-L)
> mailing list
> > To post a message email: JAVA400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
> > or email: JAVA400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/java400-l.
> >
>
> _______________________________________________
> This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
> mailing list
> To post a message email: JAVA400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
> or email: JAVA400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/java400-l.
> _______________________________________________
> This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
> To post a message email: JAVA400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
> or email: JAVA400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/java400-l.
>