java - MySql Jsp错误

Question

已关闭。此问题需要 debugging details 。目前不接受答案。

---

编辑问题以包含 desired behavior, a specific problem or error, and the shortest code necessary to reproduce the problem 。这将有助于其他人回答问题。

已关闭 8 年前。

Improve this question

此页面是从用户输入信息并按注册的另一个页面重定向的。该代码应该将信息保存到数据库中并自动将它们重定向到index.jsp。由于某些奇怪的原因，信息确实保存到数据库中，但我仍然收到此错误。

这是错误和代码:

org.apache.jasper.JasperException: An exception occurred processing JSP page /savereg.jsp at line 19

16: Statement st=con.createStatement();
17: String sqlqueryCommand="insert into subscriber(name, street_address, city, state, zip, email, login, password) values('" + name + "','" + address + "','" + city + "','" + state + "','" + zip + "','" + email + "','" + user + "','" + pass + "')";
18: 
19: st.executeUpdate(sqlqueryCommand);
20: 
21: response.sendRedirect("index.jsp");
22: %>

Answer 1

尝试使用 try/catch block ，也许还有记录器。您的代码容易受到 sql 注入(inject)的攻击。使用后请确保关闭数据库连接。尝试下面的代码:

Connection dbConnection = null;
PreparedStatement preparedStatement = null;
String insertTableSQL = "insert into subscriber(name, street_address, city, state, zip, email, login, password) values(?, ?, ?, ?, ?, ?, ?, ?)";

try{

   dbConnection = getDBConnection();
   preparedStatement = dbConnection.prepareStatement(insertTableSQL);

   preparedStatement.setString(1, name);
   preparedStatement.setString(2, street_address);
   preparedStatement.setString(3, city);
   preparedStatement.setString(4, state);
   preparedStatement.setString(5, zip);
   preparedStatement.setString(6, email);
   preparedStatement.setString(7, login);
   preparedStatement.setString(8, password); 
   preparedStatement.executeUpdate();


} catch (Exception e){
 e.printStackTrace();   
} finally {
   preparedStatement.close();
   dbConnection.close();
}