Question

I have two column username and password in USERS Table.
How can I get the value in username and password and compare it with another value in the program.

This is what I got. But, eclipse gives me an error:

String sql = "SELECT username, password FROM USERS WHERE username = ?";

ERROR:

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘?’ at line 1

Answer 1

You should either prepare you sql statement and bind a parameter ? or construct sql with actual value of username before executing query.

The former is the way to go to avoid sql-injection.