Question

I have a prepared statement like this

stmt = select * from table_name where id IN (?);

Once I pass the parameters the stmt looks like way

stmt = select * from table_name where id IN ('1,2,3');

There is no error while executing the query. However the resultset is returned only for the id=1. Is there some way I can eliminate the quotes / get the resultset for all these id’s.

stmt = select * from table_name where id IN (?);

select GROUP_CONCAT(id) id from table ;

if(rs.next()){

    stmt.setString(1,rs.getString("id"));

    stmt.executeQuery();
}

Thanks in advance.

Answer 1

It’s not clear what the ID type is, but I believe you should actually be preparing a statement with each possible value as a separate parameter:

select * from table_name where id IN (?, ?, ?)

Then add the three values for the three parameters. It’s a common problem with parameterized SQL – when you want to be able to specify a variable number of values, you need to vary the SQL. There may be a MySQL-specific way of coping with this (like table-valued parameters in SQL Server 2008) but I don’t believe there’s a generic JDBC way of doing this.