MySql Prepared Statement to check particular table JAVA

Question

I wonder if there is a way to select table with user input in the following statement:

myStmt = db.myConn.prepareStatement("select * from Rooms where "
                + "idRooms = ?");
        myStmt.setInt(1, roomNum);
        myRs = myStmt.executeQuery();

Is there a possibility to do something like select * from =? where idRooms = ? to select Rooms with prepared statement upon user input?

myStmt.setString(1, Room);
mysStmt.setInt(2, roomID);

Thanks

No, but you can just construct the string with the user input. — Byron, Jan 06 '15 at 13:41
String query = "select * from " + userParamVariable + " where idRooms = ?" — Byron, Jan 06 '15 at 14:03
This has already been answered here: http://stackoverflow.com/questions/1208442/using-prepared-statements-to-set-table-name — Bob Kuhar, Jan 06 '15 at 15:47

score 1 · Accepted Answer · answered Jan 06 '15 at 21:01

1

It is not possible to add a table name as a parameter. You can simply create a string containing your constructed query as follows:

String query = "select * from " + userParamVariable + " where idRooms = ?"

answered Jan 06 '15 at 21:01

Byron

1,313
10
22

score 0 · Answer 2 · answered Jan 06 '15 at 14:44

0

I guess you manage your tables with splitting, but unfortunately PreparedStatement does not support it, you can manually replace the table name with String.format() method.

answered Jan 06 '15 at 14:44

OuYang Liang

1

MySql Prepared Statement to check particular table JAVA

2 Answers2