Insert integer from a jsp form into a database table?

Question

See my code below...

//connect
//reading params from the form
String name = request.getParameter("name");
String year_prime = request.getParameter("year");
int year = Integer.parseInt(year_prime);

//inserting the params into table Students
stmt.executeUpdate("insert into students(name,year) values('"+name+"', year)");

//close connection

I am trying to get the year value, which is an int , and insert it into a database table. However I am getting an error, and the INSERT methods only seem to work with Strings . Could someone please help me with this problem.

Answer 1

You should have to use PreapredStatement . From your post I can see you have incorrect value for VALUES() set.

stmt.executeUpdate("insert into students(name,year) values ('" + name + "'," + year ")");

It will be easy and safe to perform database operation with PreparedStatement:

String sql="insert into students(name,year) values (?,?)";
PreparedStatement statement=cn.prepareStatement(sql);
statement.setString(1,name);
statement.setInt(2,year);
statement.executeUpdate();

Answer 2

The following links might help you with the basics and also with a working example:

1. http://www.tutorialspoint.com/jdbc/jdbc-statements.htm
2. http://www.tutorialspoint.com/jdbc/statement-object-example.htm

Though I won't recommend and it is also not a general practice to include JDBC connection code in JSP, why? Here is the Servlets and Jsp Best Practices for you.

Hope this helps.

Answer 3

Use a PreparedStatement instead of a regular Statement . Also, use executeQuery() instead of executeUpdate() .