Question

I am new to android programming, I am doing a simple SELECT with a rawquery and it is giving me an error…

Here’s my code

public Cursor getSubCategory(int categoryID){

    String select = "SELECT subcategory_name FROM subcategory WHERE id_category = " + categoryID;
    return mDb.rawQuery(select, null);      
    }

As you can see the id_category is an Integer

If anyone has ideas it would be great

Answer 1

Your not using the API to its full advantage there you should use

String select = "SELECT subcategory_name FROM subcategory WHERE id_category = ?"

and then pass in the categoryID to the second argument like

...
String[] arguments = { categoryID.toString() }
return mDb.rawQuery(select, arguments);
...

This should remove SQL injection risks as you are using parameters (the “?”).

Apart from that we will need more details about the error to help you further