how to replace a string value in java

Question

i replace a particular string in a statement like the following

SQL = SQL.replaceAll("CUSTOMER_NUMBER", customer);

this conversion goes as integer but i want to replace this as a string like the following

AND CIMtrek_accountlist_customer_number = '0002538'

but at present it replaces like the following

AND CIMtrek_accountlist_customer_number = 0002538

how to do this in java.

Why at all you are required to do this?? Can you post surrounding code to explain the scenario? And if at all you want to pass parameter in your SQL Query, Use PreparedStatement, to avoid getting attacked by SQL Injection. — Rohit Jain
– Rohit Jain, Commented Dec 18, 2012 at 11:53

Jon Taylor · Accepted Answer · 2012-12-18 11:52:33Z

3

Just get it to output the ' as well as the customer variable

SQL = SQL.replaceAll("CUSTOMER_NUMBER", "'" + customer + "'");

However as @jlordo mentioned in a comment, you should look at using prepared statements which will allow you to inject values into a prepared sql statement.

answered Dec 18, 2012 at 11:52

Jon Taylor

7,9255 gold badges32 silver badges55 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Nandkumar Tekale Over a year ago

And use of prepared statement will avoid SQL Injection Attack.

Community · Accepted Answer · 2017-05-23 12:04:31Z

1

Though you should be using PreparedStatement if you are running SQL, However if placeholder "CUSTOMER_NUMBER" is under your control, It is better to use String.format. See and example here

edited May 23, 2017 at 12:04

CommunityBot

11 silver badge

answered Dec 18, 2012 at 11:57

Deep

6,0822 gold badges28 silver badges39 bronze badges

Collectives™ on Stack Overflow

how to replace a string value in java

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related