java sql查询_java-搜索功能的SQL查询

让我们看看您的查询：

rows = st.executeQuery("SELECT * FROM applications WHERE name LIKE '%" + name+"%'"

+ " AND (nationality LIKE '" + nationality+"')"

+ " AND (specialty LIKE '" + specialty+"')"

+ " AND (experience LIKE '" + experience+"')");

在此,由于仅给出名称,因此其他值均为空.如果您出于测试目的而编写此代码：

String foo = null;

System.out.println(foo + "");

输出将是

“null”

因此,由于您的值为空,因此生成的查询将为

SELECT * FROM applications WHERE name LIKE '%Rowan Atkinson%'

AND (nationality LIKE 'null')

AND (specialty LIKE 'null')

AND (experience LIKE 'null')

首先,让我们确保在null的情况下获得空String：

rows = st.executeQuery("SELECT * FROM applications WHERE name LIKE '%" + ((name == null) ? "" : name)+"%'"

+ " AND (nationality LIKE '" + ((nationality == null) ? "" : nationality)+"')"

+ " AND (specialty LIKE '" + ((specialty == null) ? "" : specialty)+"')"

+ " AND (experience LIKE '" + ((experience == null) ? "" : experience)+"')");

下一个问题是您只将％放在名称上,这也是不正确的,所以让我们修复一下：

rows = st.executeQuery("SELECT * FROM applications WHERE name LIKE '%" + ((name == null) ? "" : name)+"%'"

+ " AND (nationality LIKE '%" + ((nationality == null) ? "" : nationality)+"%')"

+ " AND (specialty LIKE '%" + ((specialty == null) ? "" : specialty)+"%')"

+ " AND (experience LIKE '%" + ((experience == null) ? "" : experience)+"%')");

现在阅读YCF_L的答案,因此您将对PreparedStatement使用命名参数.