pass variable from java to SQL IN clause

Question

I have to format a string such that it can be sent to the IN clause of SQL. String s = ('A','B').This string s shud be passed from java to sql.How can this be done

You should know how to do it as you ask a lot of similar questions in the past. — FrVaBe, Jan 18 '11 at 08:32
Possible duplicate http://stackoverflow.com/questions/178479/alternatives-for-java-sql-preparedstatement-in-clause-issue — Tadeusz Kopec for Ukraine, Jan 18 '11 at 09:00

score 2 · Answer 1 · answered Jan 18 '11 at 08:33

I have come across this many times and to the best of my knowledge each element in the set needs to be a separate parameter:

String sql = "select * from customer where city in (?, ?, ?)";
PrepareStatement p = ..;
p.setString("Mumbai");
p.setString("Pune");
p.setString("Bangalore");
...

score -1 · Answer 2 · answered Jan 18 '11 at 08:31

-1

Simply create the SQL statement and append the string to it

String sql = "SELECT a FROM table WHERE a IN "+s;

Now you can create a SQL Statement from this string. A better way may be to use prepared statements...

answered Jan 18 '11 at 08:31

hage

5,966
3
32
42

1

Avoid creating queries with concatenation. It's dangerous. http://en.wikipedia.org/wiki/SQL_injection – Tadeusz Kopec for Ukraine Jan 18 '11 at 08:56
PreparedStatements and IN clauses don't play together very well. – Miserable Variable Jan 18 '11 at 13:04

pass variable from java to SQL IN clause

2 Answers2

Linked