java - 怎样才能造出SQL语句

Question

我有一个带有名称和密码的数据库。当有人输入两个参数时，我需要在数据库中选择正确的行。我知道如果我只想选择我可以做的名字:

如何选择名称和密码？谢谢!

public void Register(View view){
    String User = usr.getText().toString();
    String Password = pass.getText().toString();
    if(User.isEmpty() && Password.isEmpty()) Toast.makeText(this, "You Must fill all the fields", Toast.LENGTH_LONG).show();
    else{
        if(User.equals("admin") && Password.equals("admin")) ActivarActivityMenuAdministrador();
        else{
            AdminSQLiteOpenHelper adminsql = new AdminSQLiteOpenHelper(this, "DBUsers",null,1 );
            SQLiteDatabase DB = adminsql.getWritableDatabase();

            Cursor fila = DB.rawQuery("select name, password from DBUsers where nombre=" + User, null);
        }
    }
}

Answer 1

如果您将密码存储为纯文本:

DB.rawQuery("select name, password from DBUsers where name="+ User + "AND password="+ Password, null);

旁注:切勿将参数直接传递给 SQL 查询，检查 this ，相反，您应该执行与以下相同的操作:

DB.rawQuery("SELECT name, password FROM DBUsers WHERE name = ? AND password = ?", new String[] {User, Password});