如何在JSP中使用参数化SQL查询?
<sql:param>标签用作<sql:query>标签和<sql:update>标签的嵌套操作,用于为占位符提供值。如果提供空值,则占位符的值将设置为SQL NULL。
属性
<sql:param>标签具有以下属性:
属性 | 描述 | 必需 | 默认值 |
---|---|---|---|
值 | 要设置的参数值 | 否 | 主体 |
示例
首先,让我们在TEST数据库中创建一个Employees表,并在该表中创建一些记录:
步骤1
打开命令提示符并切换到安装目录:
C:\> C:\>cd Program Files\MySQL\bin C:\Program Files\MySQL\bin>
步骤2
登录数据库:
C:\Program Files\MySQL\bin>mysql -u root -p Enter password: ******** mysql>
步骤3
在TEST数据库中创建Employee表:
mysql> use TEST; mysql> create table Employees ( id int not null, age int not null, first varchar (255), last varchar (255) ); Query OK, 0 rows affected (0.08 sec) mysql>
创建数据记录
现在,我们在Employee表中创建一些记录:
mysql> INSERT INTO Employees VALUES (100, 18, 'Zara', 'Ali'); Query OK, 1 row affected (0.05 sec) mysql> INSERT INTO Employees VALUES (101, 25, 'Mahnaz', 'Fatma'); Query OK, 1 row affected (0.00 sec) mysql> INSERT INTO Employees VALUES (102, 30, 'Zaid', 'Khan'); Query OK, 1 row affected (0.00 sec) mysql> INSERT INTO Employees VALUES (103, 28, 'Sumit', 'Mittal'); Query OK, 1 row affected (0.00 sec) mysql>
现在,我们编写一个JSP,它将使用<sql:update>标签执行SQL DELETE语句,删除表中id = 103的一条记录:
<%@ page import = "java.io.*,java.util.*,java.sql.*"%> <%@ page import = "javax.servlet.http.*,javax.servlet.*" %> <%@ taglib uri = "http://java.sun.com/jsp/jstl/core" prefix = "c"%> <%@ taglib uri = "http://java.sun.com/jsp/jstl/sql" prefix = "sql"%> <html> <head> <title>JSTL sql:param Tag</title> </head> <body> <sql:setDataSource var = "snapshot" driver = "com.mysql.jdbc.Driver" url = "jdbc:mysql://127.0.0.1/TEST" user = "root" password = "pass123"/> <c:set var = "empId" value = "103"/> <sql:update dataSource = "${snapshot}" var = "count"> DELETE FROM Employees WHERE Id = ? <sql:param value = "${empId}" /> </sql:update> <sql:query dataSource = "${snapshot}" var = "result"> SELECT * from Employees; </sql:query> <table border = "1" width = "100%"> <tr> <th>Emp ID</th> <th>First Name</th> <th>Last Name</th> <th>Age</th> </tr> <c:forEach var = "row" items = "${result.rows}"> <tr> <td> <c:out value = "${row.id}"/></td> <td> <c:out value = "${row.first}"/></td> <td> <c:out value = "${row.last}"/></td> <td> <c:out value = "${row.age}"/></td> </tr> </c:forEach> </table> </body> </html>
访问上述JSP,将显示以下结果:
+-------------+----------------+-----------------+-----------------+ | Emp ID | First Name | Last Name | Age | +-------------+----------------+-----------------+-----------------+ | 100 | Zara | Ali | 18 | | 101 | Mahnaz | Fatma | 25 | | 102 | Zaid | Khan | 30 | +-------------+----------------+-----------------+-----------------+
您可以像使用DELETE语句一样,将<sql:param>标签与SQL UPDATE和SELECT语句一起使用。
广告