java - 用户输入后输出数据库内容

Question

我正在尝试执行一个语句，其中将提示用户输入作者姓名，然后将输出所有作者值，下面可以工作，但不会输出任何内容。

  public static void WhichAuthorQry (Connection conn)
 {
     Scanner sc = new Scanner(System.in);

     try {

     Statement stmt = (Statement) conn.createStatement();

     System.out.println("Please enter the Authors name to search:");
     String name = sc.next();

     String SQL = "SELECT * FROM Poet WHERE PoetName='" + name + "'";

     ResultSet rs = stmt.executeQuery(SQL);

     while(rs.next()) {
         System.out.println("Name: " + rs.getString("PoetName"));
         System.out.println("Language: " + rs.getString("Language"));

     }

     }catch (Exception e){
         System.out.println("ERROR: " + e.getMessage());
     }


 }

Answer 1

我建议将您的查询放入准备好的语句中，并允许用户使用通配符:

PreparedStatement ps = conn.prepareStatement("SELECT * FROM Poet WHERE PoetName like ?");
ps.setString(1,name);
ResultSet rs = ps.executeQuery() ;
while ( rs.next() ) {
    System.out.println("Name: " + rs.getString("PoetName"));
    System.out.println("Language: " + rs.getString("Language"));
}