Question

This question already has answers here:

java.sql.SQLException: Column count doesn t match value count at row 1 (3 answers)

Closed 6 years ago.

try {
    Statement stmt = con.createStatement();
    stmt.executeUpdate("INSERT into emailacc(fname,lname,uname,mail,passwd,passwd2,date,month,year) values( "+fname+","+lname+","+uname+","+mail+","+passwd+","+passwd2+","+date+","+selectMonth+","+year+" )");
    out.println("<h3><font color= green >Information Added Successfully.</font><br> You Are a registered User now.</h3><br>");
    con.close();
} catch(Exception e) {
    out.println("Exception caught : "+e);   
}

Why is it happening? Last time I did the same but it didn t happen, whats wrong with it?

Answer 1

Is because you are omitting single quotes, for avoid this mistakes my recommendation is to use PreraredStatement, also in order to proper close connection it mus be in a finally block , you code must look at this:

    try {
        PreparedStatement stmt = con.prepareStatement("INSERT into emailacc(fname,lname,uname,mail,passwd,passwd2,date,month,year) values(?,?,?,?,?,?,?,?,?)");
        stmt.setString(1,fname);
        stmt.setString(2,lname);
        stmt.setString(3,uname);
        stmt.setString(4,mail);
        stmt.setString(5,passwd);
        stmt.setString(6,passwd2);
        stmt.setDate(7,date); //you need convert your date to java.sql.Date if  date  field of database is of type date. If not setString is fine
        stmt.setInt(8,selectMonth);
        stmt.setInt(9,year);
        stmt.executeUpdate();
        out.println("<h3><font color= green >Information Added Successfully.</font><br> You Are a registered User now.</h3><br>");
    } catch (Exception e) {
        con.rollback();
        out.println("Exception caught : " + e);
    } finally {
        if (con != null) {
            try {
                con.close();
            } catch(SQLException ex){
                //DO NOTHING
            }
        }
    }

你们可以更多地了解:

rel=“nofollow”http://download.oracle.com/javase/tutorial/jdbc/basics/prepared.html

一份最后说明:编写文件是比值更强的声明,避免了“卡普林”ck,因此更加安全。所用时间总是编写的声明

Answer 2

您将“直接列入<><>>。不要这样做。页: 1 通过<条码>发布<> 声明/代码>使用参数表,并适当确定参数值。这样,你就不必担心。很难看一下实际的SQL

我怀疑眼前的问题是,你不引用任何价值观,因此,你会发表一份像更长篇这样的说法:

INSERT into Foo(name) VALUES (jon)

而不是

INSERT into Foo(name) VALUES ( jon )

......但使用参数Q将确定这一方向,例如please/em>。不要仅仅改变“Q”结构,以包括任何地方的单一报价。

Answer 3

说明中删除以下文字:

INSERT into emailacc(fname,lname,uname,mail,passwd,passwd2,date,month,year) values( "+fname+" , "+lname+" , "+uname+" , "+mail+" , "+passwd+" , "+passwd2+" ,"+date+","+selectMonth+","+year+")");

every column varchar or text should be between single quotes also double check your date format you might have to use the to_date function : to_date(, DD-MM-YYYY ) just a sample

友情链接