Question

I try to create a PreparedStatement:

stmt = conn.prepareStatement("SELECT POLBRP, POLTYP, POLNOP, INCPTP, TRMTHP, " +
            "CLTKYP , CANDTP, POLSTP, EXPRYP, OINCPP, CANRNP, PAYMDP,
            KCNFLP, KCRTSP, KACADP, KSCHMP, EXPRYP FROM " 
            + POLHDR + " WHERE POLNOP = " + idNumber + 
            " AND POLBRP = " + branch + " AND POLTYP = " + product + 
            " AND OINCPP <= "+date );

And this throws an SQLException: [SQL0206] Column AD not in specified tables.

I have no idea where it’s getting column AD from as I never specified it in the select clause (unless I’m being completely blind and stupid)

Can anyone help?

Answer 1

If your variables are strings, e.g. branch

" AND POLBRP = " + branch + " ...

then you forgot to quote the values

" AND POLBRP = '" + branch + "' ...

but the real solution is using placeholders

... AND POLBRP = ? ...

which would prevent such problems once and for all, this is what PreparedStatement is designed for