java - How to use the update statement in my jsp -

-

i having update statament in jsp. problem when changing whole fields in jsp , executed update statament, db updated, when updating field, other fields "" in sql statement. also, having problem having miss match in date, best format applied in sql statement in jsp.

for first problem: html code: 

<select size="1" name="nationality" class="content">         <option selected value="<%=nationality%>"><%=nationality%></option>  <%       try      {          resultset rs=null;          statement st1=null;          string query = "select country_code, nationality_name nationality_lkup ";          st1 = conn1.createstatement();          rs = st1.executequery(query);          while(rs.next())         {  %>     <option value="<%=rs.getstring("country_code")%>" >         <%=rs.getstring("nationality_name")%></option> <%         }      }     catch (exception e) {       e.printstacktrace();     } %>              </select>

and update statament is:

string  sz_sqlupdate = "update cir set"; z_sqlupdate = sz_sqlupdate  + " , nationality ='"+nationality+"'";

also, how can deal date format in update statement?

but when updating field, other fields "" in sql statement.

i not sure if complete code (the sql shown far have produced sql syntax exception when executed), should @ least not put comma between set , first column name.

if sql syntactically valid, may mean variables empty @ moment access them inline in sql statement. should either prefill variables or leave associated columns away sql query if don't need updated.

also, having problem having miss match in date, best format applied in sql statement in jsp.

the best approach not worry format , set fullworthy java object representing timestamp in sql statement using preparedstatement#settimestamp(). see recent question.

that said, have 2 major problems in code.

  1. raw java code in jsp files should avoided. leads trouble in colors, not you, others, , in future.

  2. this sql sensitive sql injection attacks , jdbc code prone resource leaking.

it's going long story explain how things properly, here few links go through picture how things properly.

you should throw away old fashioned jsp tutorial/book you're reading.


Comments

Post a Comment

Popular posts from this blog

c++ - How do I get a multi line tooltip in MFC -

-
right now, have tool tip pops when hover on edit box. problem tool tip contains multiple error messages , in 1 long line. need have each error message on own line. error messages contained in cstring new line seperating them. my existing code below. bool ontooltiptext(uint, nmhdr* pnmhdr, lresult* presult) { assert(pnmhdr->code == ttn_needtexta || pnmhdr->code == ttn_needtextw); // need handle both ansi , unicode versions of message tooltiptexta* pttta = (tooltiptexta*)pnmhdr; tooltiptextw* ptttw = (tooltiptextw*)pnmhdr; // tchar szfulltext[256]; cstring strtiptext=_t(""); uint nid = pnmhdr->idfrom; if (pnmhdr->code == ttn_needtexta && (pttta->uflags & ttf_idishwnd) || pnmhdr->code == ttn_needtextw && (ptttw->uflags & ttf_idishwnd)) { // idfrom hwnd of tool nid = ::getdlgctrlid((hwnd)nid); } //m_errprojaccel[ch] contains 1 or more error messages each...
Read more

asp.net - In javascript how to find the height and width -

-
i having .aspx , masterpage page. in masterpage loading aspx page . in aspx page design using generating table structure using code-behind server in javascript how find height , width . regards, kumar if you're looking table height , width, should it var tbl = document.getelementbyid('tbldemo'); alert(tbl.offsetwidth + '\n' + tbl.offsetheight);
Read more

c# - DataTable to EnumerableRowCollection -

-
i have datatable according client requirement can contain invalid date "00/00/1999",null,empty string.(typed datset) when collect them enumerables wish convert of invalid forms empty string. (i.e) enumerablerowcollection<datarow> query = order in _table.asenumerable() select new { orderdate= string.isnullorempty(convert.tostring(order.field<datetime>("orderdate")) || (how check date invalid date) ? string.empty : order.field<datetime>("orderdate") } how check whether date valid date or not? datetime.tryparse...like given current code: datetime date; enumerablerowcollection<datarow> query = order in _table.asenumerable() select new { orderdate= string.isnullorempty(convert.tostring(order.field<datetime>("orderdate")) || !datetime.tryparse(convert.tostring(order.field<datetime...
Read more