mysql中有没有一种表达“或”的方法？这样做的目的是搜索是否存在匹配项 "user.getinput()" 对应于 username 列或 email 列。如何用恰当的方式表达。
"user.getinput()"
username
email
SELECT FROM tablex WHERE username OR email = '"+ user.getinput()+"'";
fnvucqvd1#
我强烈建议使用准备好的语句来防止sql注入问题。像这样：
PreparedStatement stmt = conn.prepareStatement( "SELECT * FROM tablex WHERE username = ? OR email = ?");stmt.setParameter(1, "something");stmt.setParamater(2, "something");
PreparedStatement stmt = conn.prepareStatement(
"SELECT * FROM tablex WHERE username = ? OR email = ?");
stmt.setParameter(1, "something");
stmt.setParamater(2, "something");
dojqjjoe2#
以下是查询：
SELECT FROM tablex WHERE username = ? OR email = ?
更好地使用preparedstatement
String query = "SELECT FROM tablex WHERE username = ? OR email = ?";PreparedStatement stmt=con.prepareStatement(query); stmt.setString(1,userName);stmt.setString(2,email); stmt.executeUpdate();
String query = "SELECT FROM tablex WHERE username = ? OR email = ?";
PreparedStatement stmt=con.prepareStatement(query);
stmt.setString(1,userName);
stmt.setString(2,email);
stmt.executeUpdate();
2条答案
按热度按时间fnvucqvd1#
我强烈建议使用准备好的语句来防止sql注入问题。
像这样：
dojqjjoe2#
以下是查询：
更好地使用preparedstatement