String sql = "SELECT * FROM stakehoders WHERE email = ${sessionEmail}"
此处sessionEmail
是会话属性。
在Java页面中,我如下分配sessionEmail
HttpSession session = request.getSession();
session.setAttribute("sessionEmail",email);
答案 0 :(得分:0)
看看Using Prepared Statements教程。有趣的部分将是:
String sql = "SELECT * FROM stakehoders WHERE email = ?";
PreparedStatement stmt = connection.prepareStatement(sql);
stmt.setString(1, request.getSession().getAttribute("sessionEmail");
答案 1 :(得分:0)
HttpSession session = request.getSession();
String sessionEmail = session.getAttribute("sessionEmail");
PreparedStatement stmt = con.prepareStatement("SELECT * FROM stakehoders WHERE email = ?");
stmt.setString(1, sessionEmail);