gpt4 book ai didi

java - 为什么我总是出现 SQL 参数索引超出范围异常?

转载 作者:行者123 更新时间:2023-11-29 07:38:36 25 4
gpt4 key购买 nike

我查看了类似的问题,并遵循了编写查询插入数据库的语法,但我不断收到此异常。我显然没有看到什么。它在“insertStatement.setInt(1, schoolID);”处停止运行。我读到这意味着查询的语法不正确。请告诉我我哪里错了。我根本看不到。

package Servlets;

import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.Statement;
import java.sql.Timestamp;
import java.text.ParseException;
import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.persistence.EntityManager;
import javax.persistence.EntityManagerFactory;
import javax.persistence.Persistence;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import jpa.entities.School;

/**
*
* @author Timothy
*/
@WebServlet(name = "SchoolFormServlet", urlPatterns = {"/SchoolFormServlet"})
public class SchoolFormServlet extends HttpServlet {

/**
* Processes requests for both HTTP <code>GET</code> and <code>POST</code>
* methods.
*
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
protected void processRequest(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException, ParseException {
response.setContentType("text/html;charset=UTF-8");
try (PrintWriter out = response.getWriter()) {
/* TODO output your page here. You may use following sample code. */
ServletContext sc = this.getServletContext();
sc.getAttribute("schoolForm");
Integer schoolId = Integer.parseInt(request.getParameter("schoolID"));
String schoolName = request.getParameter("schoolName");
Integer periods = Integer.parseInt(request.getParameter("periods"));
Integer repeatDays = Integer.parseInt(request.getParameter("repeatDays"));
String scheduleBlock = request.getParameter("scheduleBlock");
Integer semesters = Integer.parseInt(request.getParameter("semesters"));
String rangeForLunch = request.getParameter("rangeForLunch");
String schoolYear = request.getParameter("schoolYear");
initAndExecuteQuery(schoolId,schoolName,semesters,periods,repeatDays,scheduleBlock,rangeForLunch,schoolYear);

out.println("<!DOCTYPE html>");
out.println("<html>");
out.println("<head>");
out.println("<title>Servlet SchoolFormServlet</title>");
out.println("</head>");
out.println("<body>");
out.println("<h1>Servlet SchoolFormServlet at " + request.getContextPath() + "</h1>");
out.println("</body>");
out.println("</html>");
}
}

// <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
/**
* Handles the HTTP <code>GET</code> method.
*
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
@Override
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
processRequest(request, response);
} catch (ParseException ex) {
Logger.getLogger(SchoolFormServlet.class.getName()).log(Level.SEVERE, null, ex);
}
}

/**
* Handles the HTTP <code>POST</code> method.
*
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
processRequest(request, response);
} catch (ParseException ex) {
Logger.getLogger(SchoolFormServlet.class.getName()).log(Level.SEVERE, null, ex);
}
}

/**
* Returns a short description of the servlet.
*
* @return a String containing servlet description
*/
@Override
public String getServletInfo() {
return "Short description";
}// </editor-fold>

public void initAndExecuteQuery(Integer schoolID,String schoolName, Integer semesters,Integer periods,Integer repeatDays,String scheduleBlock,String rangeForLunch, String schoolYear) {
// JDBC driver name and database URL
String jdbcDriver ="com.mysql.jdbc.Driver";
String url ="jdbc:mysql://173.194.104.102:3306/hssp_schema?zeroDateTimeBehavior=convertToNull";
Connection connection = null;
ResultSet resultSet = null;
Statement statement = null;
// Database credentials
String userName = "admin_aamir";
String passWord = "tommybrown";


try {
Class.forName("com.mysql.jdbc.Driver").newInstance();
connection = DriverManager.getConnection(url, userName , passWord);

// Execute SQL query

String sql;
sql = "INSERT INTO School VALUES ('"+schoolID+" ','"+schoolName+" ','"+semesters+" ','"+periods+" ','"+repeatDays+" ','"+scheduleBlock+" ','"+rangeForLunch+" ','"+schoolYear+" ')";
PreparedStatement insertStatement = connection.prepareStatement(sql);
insertStatement.setInt(1, schoolID);
insertStatement.setString(2,schoolName);
insertStatement.setInt(3,periods);
insertStatement.setInt(4,repeatDays);
insertStatement.setString(5,scheduleBlock);
insertStatement.setString(6,rangeForLunch);
insertStatement.setString(7,schoolYear);
insertStatement.executeQuery();
insertStatement.close();
connection.close();

}
catch (Exception e) {
e.printStackTrace();

}



}


}

最佳答案

您需要在 SQL 字符串中添加问号来告诉它它有参数——而不是直接将它们附加进去。

sql = "INSERT INTO School VALUES(?, ?, ? ...)

MySQL 连接器实现将完成将这些问号替换为您设置的参数值的艰苦工作(它不会像您的代码那样只是将它们粘贴进去,因为这会使其容易受到 SQL injection 的攻击。 )。

关于java - 为什么我总是出现 SQL 参数索引超出范围异常?,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/29837006/

25 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com