sql query

[Guest_imported]

String gp=request.getParameter("Query"
//how do i give a sql statement like this
select * from tablename where field= gp;
//this does not work why?

 

[gerald]

2 things... you need to make sure that you are not passing the string 'gp' instead of the value of gp. And normally sql statements require 's around string values.

String query = "select * from " + tablename + " where " + field + "='" + gp + "'";

This is if you are using string values. If the field is a numeric field then just don't include the 's.

Regards,
Gerald