java - sql语法错误 MySQLSyntaxErrorException

Question

String sql = "INSERT INTO order " + "(customerid, pant, shirt, date) " 
  + "VALUES ('"  + jTextField1.getText() + "','" + jTextField2.getText() 
  + "','" + jTextField3.getText() + "','" + jTextField4.getText() + "')";

当尝试这个时，我得到了以下错误:

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; 
    check the manual that corresponds to your MySQL server version for the right syntax to use near 
    'order (customerid, pant, shirt, date) VALUES ('10','2','3','26')' at line 1
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method).

Answer 1

你需要转义reserved words像带反引号的order

INSERT INTO `order` (customerid, ...

除此之外，我建议使用准备好的语句。