how to update the DB values using the getParameter()

[Nirmala123]

hai,

I want to update the database table values using the getParameter().

int rs=statement.executeUpdate("update address set name='xxxx' where name=("+request.getParameter("oldname")+")");

This code is giving this error .

javax.servlet.ServletException: [Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 1.

please can enybody help me.

thanks in advance.

[padmavathik]

hai,

I want to update the database table values using the getParameter().

int rs=statement.executeUpdate("update address set name='xxxx' where name=("+request.getParameter("oldname")+")");

This code is giving this error .

javax.servlet.ServletException: [Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 1.

please can enybody help me.

thanks in advance.

hi,
I thought that error occurs at name=("+request.getParameter("oldname")+")"),
once try with this
name='"+request.getParameter("oldname")+"'
request.getParameter("oldname") should be within the single quotes.

[nickyeng]

hai,

I want to update the database table values using the getParameter().

int rs=statement.executeUpdate("update address set name='xxxx' where name=("+request.getParameter("oldname")+")");

This code is giving this error .

javax.servlet.ServletException: [Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 1.

please can enybody help me.

thanks in advance.

why not use a string to get the parameter and set for the field in table?

// use string to get parameter from request
String str = request.getParameter("oldname");
 
// update the database
int rs=statement.executeUpdate("update address set name='xxxx' where name="+str);
 

i hope it helps....

[sumittyagi]

why not use a string to get the parameter and set for the field in table?

// use string to get parameter from request
String str = request.getParameter("oldname");
 
// update the database
int rs=statement.executeUpdate("update address set name='xxxx' where name="+str);
 

i hope it helps....

don't forget quotes
int rs=statement.executeUpdate("update address set name='xxxx' where name='"+str+"'");

and a null check. (if parameter doesn't exist).

String oldName = request.getParameter("oldname");
StringBuffer sql = null;
if(oldName !=null) //also add any other constraint you want to check.
{
    sql = new StringBuffer("update address set ");
    sql.append(" name='xxx' ");
    sql.append(" where name='");
    sql.append(oldName);
    sql.append("'");
}
int noOfUpdatedRecords = 0;
if(sql!=null)
{
    noOfUpdatedRecords = statement.executeUpdate(sql.toString());
}
 

Or its better to use PreparedStatement.

[nickyeng]

don't forget quotes
int rs=statement.executeUpdate("update address set name='xxxx' where name='"+str+"'");

and a null check. (if parameter doesn't exist).

String oldName = request.getParameter("oldname");
StringBuffer sql = null;
if(oldName !=null) //also add any other constraint you want to check.
{
    sql = new StringBuffer("update address set ");
    sql.append(" name='xxx' ");
    sql.append(" where name='");
    sql.append(oldName);
    sql.append("'");
}
int noOfUpdatedRecords = 0;
if(sql!=null)
{
    noOfUpdatedRecords = statement.executeUpdate(sql.toString());
}
 

Or its better to use PreparedStatement.

thanks for the tips, but then i dont use it in my code with the quotes.
i used Statement for it...
why?

[sumittyagi]

thanks for the tips, but then i dont use it in my code with the quotes.
i used Statement for it...
why?

I am not getting what exactly you want to ask. Please elaborate your confusion.