Java Update statement issue

Question

I am trying to update the SSN for a customer by searching for them based on the old SSN then updating it. What am I missing? This will not return a result even though i know i have matches for ssNum in the database. Thanks.

String query = "UPDATE Customers SET ss_num = ('" + updateSsn
                + "') WHERE ss_num = ('" + ssNum + "')";

You should specify your DBMS and the exception that's been thrown — Carlos Gavidia-Calderon
– Carlos Gavidia-Calderon, Commented Dec 1, 2012 at 2:23
Please use PreparedStatement with a parameterized query to guard against things like SQL injection. — Mark Rotteveel
– Mark Rotteveel, Commented Dec 1, 2012 at 8:54

Community · Accepted Answer · 2017-05-23 12:27:47Z

3

That type of query is unsafe (vulnerable to SQL injection). Write your query as follows and use PreparedStatement:

String query = "UPDATE Customers SET ss_num = ? WHERE ss_num = ?";
PreparedStatement ps = con.prepareStatement(query);
ps.setString(1, updateSsn);
ps.setString(2, ssnNum);

edited May 23, 2017 at 12:27

CommunityBot

11 silver badge

answered Dec 1, 2012 at 2:30

Bhesh Gurung

51.1k23 gold badges96 silver badges147 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Jigar Joshi · Accepted Answer · 2012-12-01 02:32:11Z

1

you need to use executeUpdate() method, which doesn't return ResultSet, but it will return numberOfRowsUpdated

Use PreparedStatement instead

edited Dec 1, 2012 at 2:32

answered Dec 1, 2012 at 2:20

Jigar Joshi

241k42 gold badges409 silver badges446 bronze badges

1 Comment

Gluons Over a year ago

Thanks! It was the executeUpdate() that was the issue.

Collectives™ on Stack Overflow

Java Update statement issue

2 Answers 2

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related