如何在JSP中使用引數化SQL查詢?
<sql:param>標籤用作<sql:query>標籤和<sql:update>標籤的巢狀操作,用於為佔位符提供值。如果提供空值,則佔位符的值將設定為SQL NULL。
屬性
<sql:param>標籤具有以下屬性:
屬性 | 描述 | 必需 | 預設值 |
---|---|---|---|
值 | 要設定的引數值 | 否 | 主體 |
示例
首先,讓我們在TEST資料庫中建立一個Employees表,並在該表中建立一些記錄:
步驟1
開啟命令提示符並切換到安裝目錄:
C:\> C:\>cd Program Files\MySQL\bin C:\Program Files\MySQL\bin>
步驟2
登入資料庫:
C:\Program Files\MySQL\bin>mysql -u root -p Enter password: ******** mysql>
步驟3
在TEST資料庫中建立Employee表:
mysql> use TEST; mysql> create table Employees ( id int not null, age int not null, first varchar (255), last varchar (255) ); Query OK, 0 rows affected (0.08 sec) mysql>
建立資料記錄
現在,我們在Employee表中建立一些記錄:
mysql> INSERT INTO Employees VALUES (100, 18, 'Zara', 'Ali'); Query OK, 1 row affected (0.05 sec) mysql> INSERT INTO Employees VALUES (101, 25, 'Mahnaz', 'Fatma'); Query OK, 1 row affected (0.00 sec) mysql> INSERT INTO Employees VALUES (102, 30, 'Zaid', 'Khan'); Query OK, 1 row affected (0.00 sec) mysql> INSERT INTO Employees VALUES (103, 28, 'Sumit', 'Mittal'); Query OK, 1 row affected (0.00 sec) mysql>
現在,我們編寫一個JSP,它將使用<sql:update>標籤執行SQL DELETE語句,刪除表中id = 103的一條記錄:
<%@ page import = "java.io.*,java.util.*,java.sql.*"%> <%@ page import = "javax.servlet.http.*,javax.servlet.*" %> <%@ taglib uri = "http://java.sun.com/jsp/jstl/core" prefix = "c"%> <%@ taglib uri = "http://java.sun.com/jsp/jstl/sql" prefix = "sql"%> <html> <head> <title>JSTL sql:param Tag</title> </head> <body> <sql:setDataSource var = "snapshot" driver = "com.mysql.jdbc.Driver" url = "jdbc:mysql:///TEST" user = "root" password = "pass123"/> <c:set var = "empId" value = "103"/> <sql:update dataSource = "${snapshot}" var = "count"> DELETE FROM Employees WHERE Id = ? <sql:param value = "${empId}" /> </sql:update> <sql:query dataSource = "${snapshot}" var = "result"> SELECT * from Employees; </sql:query> <table border = "1" width = "100%"> <tr> <th>Emp ID</th> <th>First Name</th> <th>Last Name</th> <th>Age</th> </tr> <c:forEach var = "row" items = "${result.rows}"> <tr> <td> <c:out value = "${row.id}"/></td> <td> <c:out value = "${row.first}"/></td> <td> <c:out value = "${row.last}"/></td> <td> <c:out value = "${row.age}"/></td> </tr> </c:forEach> </table> </body> </html>
訪問上述JSP,將顯示以下結果:
+-------------+----------------+-----------------+-----------------+ | Emp ID | First Name | Last Name | Age | +-------------+----------------+-----------------+-----------------+ | 100 | Zara | Ali | 18 | | 101 | Mahnaz | Fatma | 25 | | 102 | Zaid | Khan | 30 | +-------------+----------------+-----------------+-----------------+
您可以像使用DELETE語句一樣,將<sql:param>標籤與SQL UPDATE和SELECT語句一起使用。
廣告