Sql code give invalid SQL statement in Java but it works in SqlDeveloper












0














I tried to make crud , but insert statement do not work from code



   try {

        java.sql.Date sqlDate = new java.sql.Date(date.getTime());







        conn2 = DriverManager.getConnection(dbURL2, username, password);



        String sql="INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+")";



        System.out.println(sql);

        stmt = conn2.createStatement();

        ResultSet rs = stmt.executeQuery(sql);

        while (rs.next()) {

            System.out.println(rs.getString("name"));

        }

        if (conn2 != null && !conn2.isClosed()) {

            conn2.close();

        }



    } catch (SQLException ex) {

        ex.printStackTrace();

    }


I made a System.out.println to see my sql and to execute it to understand where is the problem, this is my String, and it works in sqlDeveloper:



INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('ew','rrr',TO_DATE('2018-11-14', 'yyyy-mm-dd'),12.0,2,2)





java oracle







share|improve this question
























  • INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
    – Pooja Aggarwal
    Nov 21 '18 at 9:51










  • @PoojaAggarwal change what? Can you please point the difference out?
    – Federico klez Culloca
    Nov 21 '18 at 9:51






  • 3




    Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
    – SPlatten
    Nov 21 '18 at 9:52






  • 1




    As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
    – Jåcob
    Nov 21 '18 at 10:01


















0














I tried to make crud , but insert statement do not work from code



   try {

        java.sql.Date sqlDate = new java.sql.Date(date.getTime());







        conn2 = DriverManager.getConnection(dbURL2, username, password);



        String sql="INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+")";



        System.out.println(sql);

        stmt = conn2.createStatement();

        ResultSet rs = stmt.executeQuery(sql);

        while (rs.next()) {

            System.out.println(rs.getString("name"));

        }

        if (conn2 != null && !conn2.isClosed()) {

            conn2.close();

        }



    } catch (SQLException ex) {

        ex.printStackTrace();

    }


I made a System.out.println to see my sql and to execute it to understand where is the problem, this is my String, and it works in sqlDeveloper:



INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('ew','rrr',TO_DATE('2018-11-14', 'yyyy-mm-dd'),12.0,2,2)





java oracle







share|improve this question
























  • INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
    – Pooja Aggarwal
    Nov 21 '18 at 9:51










  • @PoojaAggarwal change what? Can you please point the difference out?
    – Federico klez Culloca
    Nov 21 '18 at 9:51






  • 3




    Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
    – SPlatten
    Nov 21 '18 at 9:52






  • 1




    As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
    – Jåcob
    Nov 21 '18 at 10:01
















0












0








0







I tried to make crud , but insert statement do not work from code



   try {

        java.sql.Date sqlDate = new java.sql.Date(date.getTime());







        conn2 = DriverManager.getConnection(dbURL2, username, password);



        String sql="INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+")";



        System.out.println(sql);

        stmt = conn2.createStatement();

        ResultSet rs = stmt.executeQuery(sql);

        while (rs.next()) {

            System.out.println(rs.getString("name"));

        }

        if (conn2 != null && !conn2.isClosed()) {

            conn2.close();

        }



    } catch (SQLException ex) {

        ex.printStackTrace();

    }


I made a System.out.println to see my sql and to execute it to understand where is the problem, this is my String, and it works in sqlDeveloper:



INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('ew','rrr',TO_DATE('2018-11-14', 'yyyy-mm-dd'),12.0,2,2)





java oracle







share|improve this question















I tried to make crud , but insert statement do not work from code



   try {

        java.sql.Date sqlDate = new java.sql.Date(date.getTime());







        conn2 = DriverManager.getConnection(dbURL2, username, password);



        String sql="INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+")";



        System.out.println(sql);

        stmt = conn2.createStatement();

        ResultSet rs = stmt.executeQuery(sql);

        while (rs.next()) {

            System.out.println(rs.getString("name"));

        }

        if (conn2 != null && !conn2.isClosed()) {

            conn2.close();

        }



    } catch (SQLException ex) {

        ex.printStackTrace();

    }


I made a System.out.println to see my sql and to execute it to understand where is the problem, this is my String, and it works in sqlDeveloper:



INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID)VALUES('ew','rrr',TO_DATE('2018-11-14', 'yyyy-mm-dd'),12.0,2,2)





java oracle




java oracle






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 21 '18 at 10:01









a_horse_with_no_name

293k46447541




293k46447541










asked Nov 21 '18 at 9:49









Andrei GospodarencoAndrei Gospodarenco

8919




8919












  • INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
    – Pooja Aggarwal
    Nov 21 '18 at 9:51










  • @PoojaAggarwal change what? Can you please point the difference out?
    – Federico klez Culloca
    Nov 21 '18 at 9:51






  • 3




    Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
    – SPlatten
    Nov 21 '18 at 9:52






  • 1




    As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
    – Jåcob
    Nov 21 '18 at 10:01




















  • INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
    – Pooja Aggarwal
    Nov 21 '18 at 9:51










  • @PoojaAggarwal change what? Can you please point the difference out?
    – Federico klez Culloca
    Nov 21 '18 at 9:51






  • 3




    Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
    – SPlatten
    Nov 21 '18 at 9:52






  • 1




    As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
    – Jåcob
    Nov 21 '18 at 10:01


















INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
– Pooja Aggarwal
Nov 21 '18 at 9:51




INSERT INTO Produce(name,description,Produce_Date,Price,CATEGORY_ID,Person_ID) VALUES('"+name+"','"+description+"',TO_DATE('"+sqlDate+"', 'yyyy-mm-dd'),"+price+","+category_Id+","+person_id+") change to this
– Pooja Aggarwal
Nov 21 '18 at 9:51












@PoojaAggarwal change what? Can you please point the difference out?
– Federico klez Culloca
Nov 21 '18 at 9:51




@PoojaAggarwal change what? Can you please point the difference out?
– Federico klez Culloca
Nov 21 '18 at 9:51




3




3




Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
– SPlatten
Nov 21 '18 at 9:52




Don't do this, use a prepared statement and pass parameters, this will handle or the escaping for you and ensure your SQL is valid.
– SPlatten
Nov 21 '18 at 9:52




1




1




As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
– Jåcob
Nov 21 '18 at 10:01






As pointed out in the answer by Vaibhav, the usage of executeQuery is wrong for the insert. Have a look at this, should be using preparedStatement to avert the risk of SQL Injection.
– Jåcob
Nov 21 '18 at 10:01














1 Answer
1






active

oldest

votes


















2














you are using insert SQL query to retrieve result.



I believe to retrieve name you need to execute select statement






share|improve this answer





















  • You was right, thank you Vaibhav
    – Andrei Gospodarenco
    Nov 21 '18 at 10:00













Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53409286%2fsql-code-give-invalid-sql-statement-in-java-but-it-works-in-sqldeveloper%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









2














you are using insert SQL query to retrieve result.



I believe to retrieve name you need to execute select statement






share|improve this answer





















  • You was right, thank you Vaibhav
    – Andrei Gospodarenco
    Nov 21 '18 at 10:00


















2














you are using insert SQL query to retrieve result.



I believe to retrieve name you need to execute select statement






share|improve this answer





















  • You was right, thank you Vaibhav
    – Andrei Gospodarenco
    Nov 21 '18 at 10:00
















2












2








2






you are using insert SQL query to retrieve result.



I believe to retrieve name you need to execute select statement






share|improve this answer












you are using insert SQL query to retrieve result.



I believe to retrieve name you need to execute select statement







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 21 '18 at 9:56









Vaibhav KhamgavkarVaibhav Khamgavkar

363




363












  • You was right, thank you Vaibhav
    – Andrei Gospodarenco
    Nov 21 '18 at 10:00




















  • You was right, thank you Vaibhav
    – Andrei Gospodarenco
    Nov 21 '18 at 10:00


















You was right, thank you Vaibhav
– Andrei Gospodarenco
Nov 21 '18 at 10:00






You was right, thank you Vaibhav
– Andrei Gospodarenco
Nov 21 '18 at 10:00




















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53409286%2fsql-code-give-invalid-sql-statement-in-java-but-it-works-in-sqldeveloper%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

Create new schema in PostgreSQL using DBeaver

Image
0 At the beginning of my current job I had limited access to DB but recently my role is changed to superuser, admin, and owner. My colleague who was the previous DB admin is able to create a schema or change the permissions as there is a permission tab in the properties and he can change permissions by clicking easily. Would you please let me know how I can create schema and change permissions as well? Why his dbeaver looks different from me? He can easily right click on the schema folder on top of all schemas on the left side column and select create new schema while I do not have that, like the following picture I found on the internet. postgresql database-schema dbeaver share | improve this question
Read more

Deepest pit of an array with Javascript: test on Codility

Image
0 $begingroup$ This is the question from a Codility test, as a task in an interview: DeepestPit - problem description A non-empty zero-indexed array A consisting of N integers is given. A pit in this array is any triplet of integers (P, Q, R) such that: ·         0 ≤ P < Q < R < N; ·         sequence [A[P], A[P+1], ..., A[Q]] is strictly decreasing, i.e. A[P] > A[P+1] > ... > A[Q]; ·         sequence A[Q], A[Q+1], ..., A[R] is strictly increasing, i.e. A[Q] < A[Q+1] < ... < A[R]. The depth of a pit (P, Q, R) is the number min {A[P] − A[Q], A[R] − A[Q]}. For example, consider array A consisting of 10 elements such that: A[0] = 0 A[1] = 1 A[2] = 3 A[3] = -2 A[4] = 0 A[5] = 1 A[6] = 0 A[7] = -3 A[8] = 2 A[9] = 3 Triplet (2, 3, 4) is
Read more

Fotorealismo

Image
Guerrino Boatto, Venice's St. Barnaba Church and canal Il fotorealismo è un genere di pittura basato sull'uso di una o più fotografie dalle quali l'artista prende le informazioni necessarie da utilizzare poi nel processo della creazione dell'opera, in genere ad olio o ad acrilico, al fine di avere un aspetto finale il più simile possibile alla fotografia. Indice 1 Storia 2 Lista dei fotorealisti 3 Note 4 Voci correlate 5 Altri progetti Storia | Il fotorealismo è un movimento che nasce negli Stati Uniti d'America alla fine degli anni sessanta [1] sulla scia della Pop Art [2] [3] [4] , e insieme condividono il carattere reazionario verso la travolgente ascesa dei media, che alla metà del ventesimo secolo si trasforma in un fenomeno di massa talmente imponente da minacciare il valore dell'immagine nell'arte. [5] [6] Ne consegue così che, colto il gesto d'inizio che fu della Pop Art, i fotorealisti aprono ad un
Read more