Store acceptable path string to MySQL

Question

I am trying to store to my MySQL database the path of a file I uploaded to Tomcat. I have stored the path to a string named filepath, but when I execute the program, I get this error:

"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ':\Users\Nick\Desktop\bot.png)' at line 1 " A part of the code I used:

String fileName = fi.getName();
String contentType = fi.getContentType();
boolean isInMemory = fi.isInMemory();
long sizeInBytes = fi.getSize();

// Write the file
if( fileName.lastIndexOf("\\") >= 0 ){
    file = new File( filePath + 
    fileName.substring( fileName.lastIndexOf("\\"))) ;
}else{
    file = new File( filePath + 
    fileName.substring(fileName.lastIndexOf("\\")+1)) ;
}

I suppose the problem has to do with the format of the path, but I am pretty new to java, so I would really appreciate some help. Thank you in advance.

The code and stacktrace, without them we dont know how to help. — maress
– maress, Commented Sep 15, 2014 at 23:16

Anthony Palmer · Accepted Answer · 2014-09-15 23:17:38Z

2

Either use double backslashes to escape or forward slash, or better still prepared statements.

answered Sep 15, 2014 at 23:17

Anthony Palmer

97210 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

PM 77-1 Over a year ago

Just curious... How would a prepared statement help?

Anthony Palmer Over a year ago

Have a look at dev.mysql.com/doc/refman/5.6/en/…

PM 77-1 Over a year ago

I know what prepared statement is. My question was how it could help to deal with escaped characters.

Anthony Palmer Over a year ago

Have a read of stackoverflow.com/questions/732561/…

PM 77-1 Over a year ago

They talk about escaping from SQL side. When assigning a text value to a Java String (to be bound to query parameter) it's still necessary to escape according to Java rules. So in this case OP has to do what you suggest in the beginning to your answer even if changing to prepared statement.

Hamidreza Sadegh · Accepted Answer · 2016-07-02 10:48:57Z

0

 path = path.replaceAll((char) 92 + "" + (char) 92, (char) 47 + "");

answered Jul 2, 2016 at 10:48

Hamidreza Sadegh

2,24633 silver badges33 bronze badges

1 Comment

Magnilex Over a year ago

You could strengthen your answer by adding an explanation, even though the code probably is quite straightforward in this case.

Collectives™ on Stack Overflow

Store acceptable path string to MySQL

2 Answers 2

5 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

5 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related