用参数查询数据库的简单问题:当参数为字符串型时，sql语句应怎么写呢？

[xsm7702]

例，我在sql2000中建有表login，其中有两个字段user,password,都是字符串类型，我想查询指定user的数据，sql语句为："select * from login where user like '"+textField.getText()+"'";
结果，查不到记录。大伙帮忙看看，应该怎么写啊？若user为int型，则sql语句写为如下即可查到:"select * from login where user like"+Integer.parseInt(textField.getText());

[donghx1234]

"select * from login where user like "'%" + user + "%'";

这样就可以了

[dreamnear]

楼上所说的对，但还要看看textField.getText()是不是被加上了空格了…

[xsm7702]

还是不行啊,我现在把代码贴在下面:
String query="select password from login where user like "+"'%"+sql.getText()+"%'";
JOptionPane.showMessageDialog(null,query);
String url="jdbc:odbc:123";
Connection con=null;
PreparedStatement statement=null;
ResultSet result=null;
try{
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
con = DriverManager.getConnection(url, "sa", "0775");
statement=con.prepareStatement(query,ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);
// statement.setString(1,sql.getText());
result=statement.executeQuery();
if(result.next()) //如果有记录的话
{ sql.setText(result.getString("password"));
JOptionPane.showMessageDialog(null,"已经查找到记录,请查收!");
return;
}
else
{ JOptionPane.showMessageDialog(null,"对不起,没有找到满足条件的记录!");
sql.setText("");
return;
}
}catch(Exception ex){ex.printStackTrace();}
}
比如输入"七小对",执行总是弹出对话框说没有找到满足条件的记录,麻烦再帮忙看看啊.

[xsm7702]

谢谢老兄,不过冷水兄的语句好像写错了,应该为："select * from login where user like '%"+user+"%'";