SQL query works in PHPMyAdmin but not in Java (JDBC)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have generated the following string in java:
select * from `levelone_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `changelang_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `leveltwo_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `levelthree_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `sequence_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `search_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `settings_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W'
and then converted it to a SQL statement using PreparedStatement. Now this SQL Query works perfectly fine in PHPMyAdmin and successfully gives the following output:
PHPMyAdmin output screenshot
But when the same query is being executed from within the java program, it throws the following exception:
com.mysql.jdbc.exceptions.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'where user_session_key='-LIi-AlyYC37HfRezq7W'' at line 1
Not really sure why this is happening. Help!
EDIT:
Here is the java code that is actually generating the above string and executing it as a SQL statement.
Collection<String> activities = Utilities.AppActivities.values();
int no_of_activities = activities.size(), i=0;
query = "";
for(String activity: activities)
if(i < no_of_activities-1)
query += "select * from `" + activity + "` where user_session_key='" + session_key + "' union ";
else
query += "select * from `" + activity + "` where user_session_key='" + session_key + "'";
i++;
System.out.println(query);
stmt = con.prepareStatement(query);
rs = stmt.executeQuery();
duration = 0;
while(rs.next())
duration += rs.getInt("duration");
java jdbc mariadb
add a comment |
I have generated the following string in java:
select * from `levelone_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `changelang_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `leveltwo_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `levelthree_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `sequence_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `search_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `settings_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W'
and then converted it to a SQL statement using PreparedStatement. Now this SQL Query works perfectly fine in PHPMyAdmin and successfully gives the following output:
PHPMyAdmin output screenshot
But when the same query is being executed from within the java program, it throws the following exception:
com.mysql.jdbc.exceptions.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'where user_session_key='-LIi-AlyYC37HfRezq7W'' at line 1
Not really sure why this is happening. Help!
EDIT:
Here is the java code that is actually generating the above string and executing it as a SQL statement.
Collection<String> activities = Utilities.AppActivities.values();
int no_of_activities = activities.size(), i=0;
query = "";
for(String activity: activities)
if(i < no_of_activities-1)
query += "select * from `" + activity + "` where user_session_key='" + session_key + "' union ";
else
query += "select * from `" + activity + "` where user_session_key='" + session_key + "'";
i++;
System.out.println(query);
stmt = con.prepareStatement(query);
rs = stmt.executeQuery();
duration = 0;
while(rs.next())
duration += rs.getInt("duration");
java jdbc mariadb
1
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
2
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03
add a comment |
I have generated the following string in java:
select * from `levelone_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `changelang_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `leveltwo_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `levelthree_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `sequence_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `search_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `settings_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W'
and then converted it to a SQL statement using PreparedStatement. Now this SQL Query works perfectly fine in PHPMyAdmin and successfully gives the following output:
PHPMyAdmin output screenshot
But when the same query is being executed from within the java program, it throws the following exception:
com.mysql.jdbc.exceptions.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'where user_session_key='-LIi-AlyYC37HfRezq7W'' at line 1
Not really sure why this is happening. Help!
EDIT:
Here is the java code that is actually generating the above string and executing it as a SQL statement.
Collection<String> activities = Utilities.AppActivities.values();
int no_of_activities = activities.size(), i=0;
query = "";
for(String activity: activities)
if(i < no_of_activities-1)
query += "select * from `" + activity + "` where user_session_key='" + session_key + "' union ";
else
query += "select * from `" + activity + "` where user_session_key='" + session_key + "'";
i++;
System.out.println(query);
stmt = con.prepareStatement(query);
rs = stmt.executeQuery();
duration = 0;
while(rs.next())
duration += rs.getInt("duration");
java jdbc mariadb
I have generated the following string in java:
select * from `levelone_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `changelang_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `leveltwo_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `levelthree_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `sequence_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `search_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W' union select * from `settings_sessions` where user_session_key='-LIi-AlyYC37HfRezq7W'
and then converted it to a SQL statement using PreparedStatement. Now this SQL Query works perfectly fine in PHPMyAdmin and successfully gives the following output:
PHPMyAdmin output screenshot
But when the same query is being executed from within the java program, it throws the following exception:
com.mysql.jdbc.exceptions.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'where user_session_key='-LIi-AlyYC37HfRezq7W'' at line 1
Not really sure why this is happening. Help!
EDIT:
Here is the java code that is actually generating the above string and executing it as a SQL statement.
Collection<String> activities = Utilities.AppActivities.values();
int no_of_activities = activities.size(), i=0;
query = "";
for(String activity: activities)
if(i < no_of_activities-1)
query += "select * from `" + activity + "` where user_session_key='" + session_key + "' union ";
else
query += "select * from `" + activity + "` where user_session_key='" + session_key + "'";
i++;
System.out.println(query);
stmt = con.prepareStatement(query);
rs = stmt.executeQuery();
duration = 0;
while(rs.next())
duration += rs.getInt("duration");
java jdbc mariadb
java jdbc mariadb
edited Nov 17 '18 at 9:04
Mark Rotteveel
62.1k1479123
62.1k1479123
asked Nov 16 '18 at 13:47
Harshit BudhrajaHarshit Budhraja
42
42
1
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
2
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03
add a comment |
1
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
2
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03
1
1
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
2
2
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53339123%2fsql-query-works-in-phpmyadmin-but-not-in-java-jdbc%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53339123%2fsql-query-works-in-phpmyadmin-but-not-in-java-jdbc%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Show us your Java code, formatted to be readable, and maybe someone will be able to help you.
– Tim Biegeleisen
Nov 16 '18 at 13:49
@TimBiegeleisen As suggested by you, I've added the java code in the edits :)
– Harshit Budhraja
Nov 16 '18 at 14:02
2
Are you aware that you are not really using the prepared statement?
– Tim Biegeleisen
Nov 16 '18 at 14:04
Kind of aware that PreparedStatement generally uses '?' for parameters, but I don't really know if that'd help in the task I'm doing here. So I used this approach!
– Harshit Budhraja
Nov 16 '18 at 14:16
Your current code is vulnerable to SQL injection (which is likely also the cause of your error). Please use prepared statements properly. In any case, please post a Minimal, Complete, and Verifiable example, including sample values that trigger the error.
– Mark Rotteveel
Nov 17 '18 at 9:03