Java的SQL界面错误

Question

// Button Update 
private void jButton_UpdateActionPerformed(java.awt.event.ActionEvent evt) {            



    String query = "UPDATE `petrol` SET `Available`="+jTextField_Id.getText()+" WHERE `Pump` = '"+jTextField_FirstName.getText(); 
    executeSQlQuery(query, "Updated"); 
}            


// Button Delete 
private void jButton_DeleteActionPerformed(java.awt.event.ActionEvent evt) {            
    String query = "DELETE FROM `petrol` WHERE Pump = '"+jTextField_FirstName.getText(); 
    executeSQlQuery(query, "Deleted"); 

我得到关于语法的错误消息，我也有一个try catch块

Answer 1

有一些不一致的价值观在SQL语法的参数。 可用的值根本不包含在单引号中，并且值泵在开始时只有一个（在两个查询中）。下面的查询会更有意义..

String query = "UPDATE `petrol` SET `Available`='"+jTextField_Id.getText()+"' WHERE `Pump` = '"+jTextField_FirstName.getText() + "'"; 

和

String query = "DELETE FROM `petrol` WHERE Pump = '"+jTextField_FirstName.getText() + "'"; 

（也知道SQL注入与这种类型的参数插入的。）