preparedstatement mysql 数据_java 中使用 PreparedStatement ，对 mysql 执行插入数据 ，出现问题，求高手指导...

错误：com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException:YouhaveanerrorinyourSQLsyntax;checkthemanualthatcorrespondstoyourMySQLserverversionfortherightsyntaxtousen...

错误：

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException:

You have an error in your SQL syntax;

check the manual that corresponds to your MySQL server version for the right syntax

to use near '祦鋖\"?S崜锕?s没rq沔?b?\"?聩蜲???1-鞿v ??4゛?

部分源码：

Connection conn = null;

PreparedStatement pstmt = null;

String sql = "insert into userblob(name,photo) values(?,?)";

try {

Class.forName(DRIVER);

System.out.println("驱动加载成功.....");

conn = DriverManager.getConnection(URL, USER, PASSWORD);

System.out.println("数据库连接成功.....");

pstmt = conn.prepareStatement(sql);

File f = new File("E:\\workspaces\\eclipse_3.7.1\\mldn_demo\\mldn.jpg");

InputStream input = new FileInputStream(f);

pstmt.setString(1, "李华");

pstmt.setBinaryStream(2, input, (int)f.length());

pstmt.executeUpdate();

System.out.println("数据库更新成功....."

我知道是sql 脚步错了，但是哪错了呢？

mysql> show create table userblob;

| userblob | CREATE TABLE `userblob` (

`id` int(11) NOT NULL AUTO_INCREMENT,

`name` varchar(30) NOT NULL,

`photo` longblob,

PRIMARY KEY (`id`)

) ENGINE=InnoDB DEFAULT CHARSET=gbk |

展开