java - 我正在尝试插入 sql，但它一直给我错误

Question

我想通过java插入sql，但它给了我错误

public void addStudent(String name, int SID, String gender, String major, String nationality, int mobileNo,
            String birthDate, int deptNo) {

        try {
            PreparedStatement stmt = conn.prepareStatement("insert into students values("+ SID+ ", '"+name+"','"
                    + gender+"',"+mobileNo + ",TO_Date('"+birthDate+"', 'DD/MM/YYYY'), '"+ major+"', '"+nationality+"', null, "+deptNo+");");
            stmt.execute();
        } catch (SQLException e) {

            e.printStackTrace();
            return;

        }
    }

java.sql.SQLSyntaxErrorException: ORA-00933: SQL command not properly ended

Answer 1

使用PreparedStatement如下所示:

       try {
         //passing placeholder 
            PreparedStatement stmt = conn.prepareStatement("insert into students values(?,?,?,?,?,?,?,?,?)");
          //giving valuesto each placeholder 
           stmt.setInt(1,SID);
            stmt.setString(2,name);
            stmt.setString(3,gender);
            stmt.setInt(4,mobileNo );
            stmt.setDate(5,birthDate);
            stmt.setString(6,major);
            stmt.setString(7,nationality);
            stmt.setString(8,null);
            stmt.setInt(9,deptNo ); 
            //executing update,insert value in table
            stmt.executeUpdate();
        } catch (SQLException e) {

            e.printStackTrace();
            return;

        }