Java MYSQL Prepared Statement Error: Check syntax to use near '?' at line 1

Question

I am trying to use the java mysql library but I am having issues using a prepared statement. I am not sure what I am missing. Below is what I have with the MYSQL error attempting to use the prepared statement.

String query = "SELECT id, clicks FROM mailer.links WHERE campaign_id=?";
    try {

        preparedStatement = connect.prepareStatement(query);
        preparedStatement.setInt(1, campaignId);
        preparedStatement.execute();
        Statement st = connect.createStatement();


        // execute the query, and get a java resultset
        ResultSet rs = st.executeQuery(query);

I am getting the following error:

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: 
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near '?' at line 1

It works if I do "campaign_id=" + campaignId , but is a SQL injection waiting to happen.

Young Emil · Accepted Answer · 2016-08-25 00:16:15Z

2

Try this

ResultSet rs = preparedStatement.executeQuery();

edited Aug 25, 2016 at 0:16

Young Emil

2,2763 gold badges29 silver badges39 bronze badges

answered Aug 24, 2016 at 23:08

Jun Yuan

4141 gold badge4 silver badges5 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Md. Nasir Uddin Bhuiyan · Accepted Answer · 2016-08-24 23:28:10Z

0

PreparedStatement method executeQuery() itself returns a ResultSet object

So assign this to a ResultSet object

ResultSet rs = preparedStatement.executeQuery();

Error:

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: 
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near '?' at line 1

And this error happens because When

ResultSet rs = st.executeQuery(query);

This statement executes it can't find any value in ? operator. so your query remains this "SELECT id, clicks FROM mailer.links WHERE campaign_id=?"; and this throws a MySQL Syntax Exception.

edited Aug 24, 2016 at 23:28

answered Aug 24, 2016 at 23:18

Md. Nasir Uddin Bhuiyan

1,5961 gold badge14 silver badges24 bronze badges

Collectives™ on Stack Overflow

Java MYSQL Prepared Statement Error: Check syntax to use near '?' at line 1

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related