Syntax error with mysql database using JDBC

Question

PreparedStatement posted = con.prepareStatement(
    "INSERT INTO userdate (description, UUID) VALUES ('"+ desc + "','" + postuuid + "') ON DUPLICATE KEY UPDATE");

this is the error You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' this is the code I have, does anyone know waht might be wrong with this?

Do not concatenate values into a query string, it makes your code vulnerable to SQL injection. You need to properly parametrize your query by using parameters (?) instead of values. — Mark Rotteveel
– Mark Rotteveel, Commented Apr 21, 2021 at 7:54

Craig · Accepted Answer · 2021-04-20 01:55:19Z

1

Check on MySQL docs for reference on DUPLICATE KEY UPDATE https://dev.mysql.com/doc/refman/8.0/en/insert-on-duplicate.html

The keyword "UPDATE" is not the absolute end of the statement. You need to specify the fields/values that will be updated

answered Apr 20, 2021 at 1:55

Craig

1,2595 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Ukraine1449 Over a year ago

Thank you this helped. This is my new code: PreparedStatement posted = con.prepareStatement("INSERT INTO userdata(description, UUID) VALUES ('"+desc+"', '"+postuuid+"') ON DUPLICATE KEY UPDATE description='"+ desc +"'");

Collectives™ on Stack Overflow

Syntax error with mysql database using JDBC

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related