Question

I have a form and I want to send the data to a database. How can I pass the request data through the method parameters and send it to the Database?

int status = InsertCustomer(fName, mName, lName , iage, issn, city, state, country);

//Method
// This method should return an int that the executeUpdate       // methods returns. Note: the driver name and the URL are       // already available in the init() method.

  private int InsertCustomer(String firstName, String midName, String lastName, int age, int ssn, String city, String state, String country) {

    // JDBC logic


    try {
        Class.forName(driverName);
        Connection conn = DriverManager.getConnection(databaseURL);
        java.sql.Statement st = conn.createStatement();


        st.executeUpdate("INSERT INTO Customer(firstName, midName, lastName, age, ssn, city, state, country)" + 
                   "VALUES ('?', '?', '?', ?, ?, '?', '?', '?')";


    } catch (Exception e) {
        // TODO: handle exception
        e.printStackTrace();
    }

    return 1;
}

I’m a lil bit lost, a little would be very much appreciated.

Answer 1

Either you use a simple (i.e. not prepared statement), and you can’t pass any parameter:

String sql = "insert into sometable (a, b, c) values (7, 8, 9)";
Statement st = conn.createStatement();
return st.executeUpdate(sql);

Or (and in your case, that’s what you should do), you use a prepared statament and pass parameters:

String sql = "insert into sometable (a, b, c) values (?, ?, ?)";
PreparedStatement st = conn.prepareStatement(sql);
st.setInt(1, 7);
st.setInt(2, 8);
st.setInt(3, 9);
return st.executeUpdate();

In your code, you’re using a simple statement and try to execute a SQL query which needs parameters. That’s not possible. You need a prepared statement to do that.

More information in the JDBC tutorial.