SQL query.setParameter() not getting single quoted string in Java

Question

I am trying to run one SQL query using indexed query as, list.add("'%" + some_string + "%'"); and set in query(sample) like :

query=select * from table where name like ?1;

I am setting parameter as :

 query.setParameter(1, list.get(0));

It doesn't work, instead if I put the value directly in query, like :

select * from table where name like '%"+some_string+"%'

It works. I am using JPA Hibernate and postgres database.

Is there any internal parsing of single quotes while setting parameter as

query.setParameter();

Ravi K Thapliyal · Accepted Answer · 2015-04-23 03:07:35Z

2

Drop the '' quotes from the placeholder value being added to the List.

list.add("%" + some_string + "%");

Now query.setParameter(1, list.get(0)); should work as expected because any string value being bound to a ? placeholder does not require to be quoted.

answered Apr 23, 2015 at 3:07

Ravi K Thapliyal

51.9k9 gold badges80 silver badges90 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Akash Shinde Over a year ago

I did that..was working fine! But just worried because I am using LIKE in query which takes parameter in single quotes!

Ravi K Thapliyal Over a year ago

It has nothing to do with LIKE as such. If you had been using any other operator like = or an IN clause, it would still require unquoted string values as parameters for your prepared statement.

Zoran777 Over a year ago

@RaviThapliyal How to set parameter in such a way that the single quotes don't get added? I need to pass a column name as a parameter. Can't put the column name as "+ columnName +" 'cause I fetch the query from a JSON. Any ideas?

Collectives™ on Stack Overflow

SQL query.setParameter() not getting single quoted string in Java

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related