Having a syntax error in INSERT statement on the date and time

[carecare86]

These are the codes. I cant see any error there. Please kindly help. Thanks.

void saveMedicalRecords() {
try {
Class.forName(driver);
Connection connection = DriverManager.getConnection(url2, username, password);
Statement statement = connection.createStatement();
sql = "INSERT INTO medicalrecords (NRIC, Time, Diagnosis, MC, NoOfDays, Prescription1, Qty1, Prescription2, Qty2, Prescription3, Qty3, Prescription4, Qty4, Prescription5, Qty5, Additional) VALUES ('"+txtPID3.getText()+"',"+timeNow+",'"+txtDiagnos is.getText()+"',"+MC_String+",'"+txtDays.getText() +"','"+txtDrug1.getText()+"',"+txtQ1.getText()+",' "+txtDrug2.getText()+"',"+txtQ2.getText()+",'"+txt Drug3.getText()+"',"+txtQ3.getText()+",'"+txtDrug4 .getText()+"',"+txtQ4.getText()+",'"+txtDrug5.getT ext()+"',"+txtQ5.getText()+",'"+txtAdd.getText()+" ')";
System.out.println("sql is : "+sql);
statement.executeUpdate(sql);
connection.close();
}
catch (Exception ex){
ex.printStackTrace();
}
saySavedMedicalRecords();
}

[Dököll]

Can you tell us a little more? Where are the errors... Please post a bit of it and a brief explaination. I suspect you are not formatting the date variable upon inserting. What is the date format in the db.

I would also use preparedStatement to fend off having to format dates going in. Also preparedStatement is of great use against SQL injection.

http://www.java2s.com/Code/Java/Database-SQL-JDBC/DemoPreparedStatementSetBytes.htm

In a bit!