java - MySQLSyntaxErrorException - 准备好的语句中的参数无效

Question

我有一个像下面这样的代码。我已经尝试了堆栈中的其他解决方案，但似乎没有任何效果。生成错误的 Java 代码如下所示。

public Connection getConnection() 
    {
      try 
      {
        conn = DriverManager.getConnection(CONNSTR, USER, PASS);
        return conn;
      }
      catch (SQLException e) 
      {
        e.printStackTrace();
        return null;
      }
    }

    public boolean AuthenticateUser() 
    {   
        String UserName = "User";
        String Password = "Password";

        try 
        {
            PreparedStatement  pstmt = null;
            ResultSet          rs   = null;
            conn = getConnection();

            String strSQL = "SELECT UserName " +
                      "  FROM Users " +
                      " WHERE UserId   = ?  AND " + 
                      "       Password = ?";

          pstmt = (PreparedStatement) conn.prepareStatement(strSQL);
          pstmt.setString(1, UserName);
          pstmt.setString(2, Password);

          System.out.println(strSQL);

          rs = pstmt.executeQuery(strSQL);

          System.out.println(rs.getRow());

          rs.last();
          int TotalRows = rs.getRow();
          System.out.println(TotalRows);

          if(TotalRows > 0)
            return true;
          else
            return false;  

        } 
        catch (SQLException e) 
        {
          e.printStackTrace();
          return false;
        }         
    }

数据库的表结构如下

CREATE TABLE Users(Id INT NOT NULL PRIMARY KEY AUTO_INCREMENT,
                   UserName VARCHAR(255),
                   UserId VARCHAR(255),
               Password VARCHAR(255))

错误如下所示 Image


异常如下

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?  AND          Password = ?' at line 1
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
    at java.lang.reflect.Constructor.newInstance(Unknown Source)
    at com.mysql.jdbc.Util.handleNewInstance(Util.java:411)
    at com.mysql.jdbc.Util.getInstance(Util.java:386)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1052)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3609)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3541)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:2002)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2163)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2618)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2568)
    at com.mysql.jdbc.StatementImpl.executeQuery(StatementImpl.java:1557)
    at com.apryll.db.util.dbUtil.AuthenticateUser(dbUtil.java:55)
    at com.apryll.db.Login.doPost(Login.java:42)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
    at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:562)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:395)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:250)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:188)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:302)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

Answer 1

您再次将 SQL 传递给 executeQuery方法。该签名不会出现在 API 中。该方法不需要参数。

executeQuery() javaDoc