根据姓名查询用户信息的一段代码有什么问题

[big_flower123]

//根据姓名查询用户信息
public Customer getOneUser(String name) {
try{
Configuration config = new Configuration().configure();
SessionFactory sessionFactory = config.buildSessionFactory();
Session session = sessionFactory.openSession();
Transaction ts=session.beginTransaction();
String hql="from Customer where username='"+name+"'";
Query query=session.createQuery(hql);
Customer usr=(Customer) query.uniqueResult();
ts.commit();
session.clear();
return usr;
}catch(Exception e){
e.printStackTrace();
return null;
}
}

这段代码有什么问题？

[dqsweet]

没看出有什么问题，怎么报错吗

[未来纪元]

Query query=session.createQuery(hql); 
Customer usr=(Customer) query.uniqueResult();

改成

Query query=session.createQuery(hql); 
Customer usr=(Customer) query.addEntity(Customer.class).uniqueResult();