java - 将电子邮件作为参数传递给 SQL 查询、PostreSQL、JAVA

Question

我正在尝试将电子邮件作为参数传递给我的 JAVA 后端中的 SELECT SQL 查询。据我所知，出于某种原因，它只传递来自“email_name@email.com”的“email_name”。 (出现此错误):

Threw a SQLException creating the list of blogs.
ERROR: column "email_name" does not exist
  Position: 174

有一个存在的行，其中包含“email_name@email.com”。(为什么是“ERROR: column”？根据查询，它应该查找一个值，不是吗？)

这是我的查询:

        String active_user = "email_name@email.com"; //email_name@email.com - example, active_user receive some path variable and on this particular moment(before query execution) contains exactly "email_name@email.com".
        ResultSet rs = st.executeQuery("SELECT \n" +
                "  goods.item_title, \n" +
                "  goods.item_descr, \n" +
                "  goods.item_email,\n" +
                "  goods.item_images,\n" +
                "  goods.item_phone, \n" +
                "  goods.item_price \n" +
                "FROM \n" +
                "  public.goods\n" +
                "WHERE goods.owner = "+active_user+"\n" +
                "ORDER BY\n" +
                "  goods.item_id ASC;");

所以问题是 - 如何将完整的电子邮件传递给查询？

Answer 1

尝试使用 String active_user = "'email_name@email.com'";。用单引号。因为当您使用双引号时 postgre 被识别为列。

您应该使用PreparedStatement。这是example