jspÖÐÈçºÎ¹¹Ô춯̬sqlÓï¾ä

1      String n = user.getName();
2      String pass = user.getPassword();

3      String sql = "select * from user where name = " + n + " and  password = " +  pass;

4      PreparedStatement ps = con.prepareStatement(sql);
µÚÈý¾äÓÐÎÊÌâ

MySQLSyntaxErrorException: Unknown column 'huoyingfans' in 'where clause'

---

ÄǸönÓ¦¸ÃÔÙ¼Ó¸öµ¥ÒýºÅ°É£¬ÎҼǵÃÊÇÕâÑùµÄ¡£

---

nÇ°ºó¼Ó¸öµ¥ÒýºÅ

---

Íü¼Ç»¹ÓÐpasswordÁË Ò²Òª¼Ó

---

²»Ðеİ¡ £¡

---

// ¼ìÑéµÇ¼Óû§µÄºÏ·¨ÐÔ
public boolean checkUser() throws Exception {
boolean flag = false;
if (user != null) {
try {
String n = user.getName();
String pass = user.getPassword();

£¿£¿£¿£¿£¿ String sql = "select * from user where name = " +
'n' + " and password = " + 'pass';

PreparedStatement ps = con.prepareStatement(sql);

if (null != ps.executeQuery()) {
flag = true;
}
// ¹Ø±ÕÁ¬½Ó
ps.close();
con.close();

} catch (Exception e) {
e.printStackTrace();
}
}

return flag;
}

ÕâÑùд ÓÐÓï·¨´íÎó

---

ûÓÐÄÇÁÐ

---

ÎҾ;õµÃûÄÇÁÐ
Unknown column 'huoyingfans&