JSP中使用PreparedStatement操作数据库 -

xqf222

浏览: 117988 次
性别:
来自: 深圳

最近访客更多访客>>

wujing7390

samuel0818

liu_guo_1982

akige

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

JSP中使用PreparedStatement操作数据库

<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*"  import="java.util.*" import="java.text.*" errorPage="" %>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<title>JSP中使用PreparedStatement操作数据库</title>

<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />

</head>

<body>

<table width="1002" border="0" cellpadding="0" cellspacing="0">

  <tr>

    <td align="center"></td>

  </tr>

<% 

//JSP中使用PreparedStatement操作数据库

Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver").newInstance(); 

String  url="jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=SQL数据库名"; 

Connection con=DriverManager.getConnection(url,"SQL用户名","SQL用户密码"); 

//打开SQL数据库连接

//插入记录

PreparedStatement myStatement1 = con.prepareStatement("insert into Article (Title,Content,UpdateIP,UpdateFrom) values (?,?,?,?)"); 

String UpdateIP = request.getRemoteAddr();

String UpdateFrom = request.getHeader("Referer");



myStatement1.setString(1,"新文章标题"); 

myStatement1.setString(2,"新文章内容"); 

myStatement1.setString(3,UpdateIP); 

myStatement1.setString(4,UpdateFrom); 

myStatement1.executeUpdate(); 

myStatement1.close();

//精确查询记录

PreparedStatement myStatement2 = con.prepareStatement("Select * from Article where NewsID=166"); 

ResultSet rs2 = myStatement2.executeQuery();

while (rs2.next()) 

{

%>

   <tr>

    <td align="center"><a href="1.jsp"><%=rs2.getString("NewsID")%></a></td>

  </tr>

   <tr>

    <td align="center"><%=rs2.getString("Title")%></td>

  </tr>

  <tr>

    <td align="left" valign="top">更新IP：<%=rs2.getString("UpdateIP")%>更新来源：<%=rs2.getString("UpdateFrom")%></td>

  </tr>

<%

}

myStatement2.close();

//更新记录

PreparedStatement myStatement3 = con.prepareStatement("Update Article Set Title=?,Content=?,UpdateIP=?,UpdateFrom=? where NewsID=173");        

myStatement3.setString(1, "新文章标题3");

myStatement3.setString(2, "新文章内容3");

myStatement3.setString(3, UpdateIP);

myStatement3.setString(4, UpdateFrom);

myStatement3.executeUpdate();

myStatement3.close();

//删除记录

PreparedStatement myStatement4 = con.prepareStatement("Delete from Article where NewsID=169");  

myStatement4.executeUpdate();

myStatement4.close();

//模糊查询

PreparedStatement myStatement5 = con.prepareStatement("Select * from Article where Title like '%' +? +'%'"); 

myStatement5.setString(1,"文章"); 

ResultSet rs5 = myStatement5.executeQuery();

while (rs5.next()) 

{

%>

   <tr>

    <td align="center"><a href="ReadNews.jsp?ID=<%=rs5.getString("NewsID")%>" target="_blank"><%=rs5.getString("Title")%></a></td>

  </tr>

   <tr>

    <td align="center"><%=rs5.getString("Content")%></td>

  </tr>

  <tr>

    <td align="left" valign="top">更新IP：<%=rs5.getString("UpdateIP")%>更新来源：<%=rs5.getString("UpdateFrom")%></td>

  </tr>

<%

}

myStatement5.close();



con.close(); //关闭数据库连接

%> 

</table>

</body> 

</html>

分享到：