Mil*_*daD 92 java mysql sql jdbc
嗨,我想知道是否有可能使用JDBC执行这样的事情,因为它目前提供异常,即使它可以在MySQL查询浏览器中.
"SELECT FROM * TABLE;INSERT INTO TABLE;"
Run Code Online (Sandbox Code Playgroud)
虽然我确实意识到可以将SQL查询字符串拆分并且语句执行两次,但我想知道是否有一次性方法.
String url = "jdbc:mysql://localhost:3306/";
String dbName = "databaseinjection";
String driver = "com.mysql.jdbc.Driver";
String sqlUsername = "root";
String sqlPassword = "abc";
Class.forName(driver).newInstance();
connection = DriverManager.getConnection(url+dbName, sqlUsername, sqlPassword);
Run Code Online (Sandbox Code Playgroud)
Rav*_*ddy 129
我想知道是否可以使用JDBC执行类似的操作.
"SELECT FROM * TABLE;INSERT INTO TABLE;"
Run Code Online (Sandbox Code Playgroud)
对的,这是可能的.据我所知,有两种方法.他们是
以下示例说明了上述两种可能性.
示例1 :(允许多个查询):
发送连接请求时,需要将连接属性附加allowMultiQueries=true到数据库URL.这是额外的连接属性,如果那些已经存在一些像autoReConnect=true等.可接受值allowMultiQueries属性是true,false,yes,和no.使用a在运行时拒绝任何其他值SQLException.
String dbUrl = "jdbc:mysql:///test?allowMultiQueries=true";
Run Code Online (Sandbox Code Playgroud)
除非这样的指示通过,否则SQLException抛出.
您必须使用execute( String sql )或其他变体来获取查询执行的结果.
boolean hasMoreResultSets = stmt.execute( multiQuerySqlString );
Run Code Online (Sandbox Code Playgroud)
要迭代并处理结果,您需要执行以下步骤:
READING_QUERY_RESULTS: // label
while ( hasMoreResultSets || stmt.getUpdateCount() != -1 ) {
if ( hasMoreResultSets ) {
Resultset rs = stmt.getResultSet();
// handle your rs here
} // if has rs
else { // if ddl/dml/...
int queryResult = stmt.getUpdateCount();
if ( queryResult == -1 ) { // no more queries processed
break READING_QUERY_RESULTS;
} // no more queries processed
// handle success, failure, generated keys, etc here
} // if ddl/dml/...
// check to continue in the loop
hasMoreResultSets = stmt.getMoreResults();
} // while results
Run Code Online (Sandbox Code Playgroud)
示例2:要遵循的步骤:
select,并DML查询.CallableStatement.ResultSet在过程中执行的多个s.select样品表和程序:
mysql> create table tbl_mq( i int not null auto_increment, name varchar(10), primary key (i) );
Query OK, 0 rows affected (0.16 sec)
mysql> delimiter //
mysql> create procedure multi_query()
-> begin
-> select count(*) as name_count from tbl_mq;
-> insert into tbl_mq( names ) values ( 'ravi' );
-> select last_insert_id();
-> select * from tbl_mq;
-> end;
-> //
Query OK, 0 rows affected (0.02 sec)
mysql> delimiter ;
mysql> call multi_query();
+------------+
| name_count |
+------------+
| 0 |
+------------+
1 row in set (0.00 sec)
+------------------+
| last_insert_id() |
+------------------+
| 3 |
+------------------+
1 row in set (0.00 sec)
+---+------+
| i | name |
+---+------+
| 1 | ravi |
+---+------+
1 row in set (0.00 sec)
Query OK, 0 rows affected (0.00 sec)
Run Code Online (Sandbox Code Playgroud)
从Java调用过程:
CallableStatement cstmt = con.prepareCall( "call multi_query()" );
boolean hasMoreResultSets = cstmt.execute();
READING_QUERY_RESULTS:
while ( hasMoreResultSets ) {
Resultset rs = stmt.getResultSet();
// handle your rs here
} // while has more rs
Run Code Online (Sandbox Code Playgroud)
小智 31
您可以使用批量更新,但查询必须是操作(即插入,更新和删除)查询
Statement s = c.createStatement();
String s1 = "update emp set name='abc' where salary=984";
String s2 = "insert into emp values ('Osama',1420)";
s.addBatch(s1);
s.addBatch(s2);
s.executeBatch();
Run Code Online (Sandbox Code Playgroud)
Gly*_*lyn 17
提示:如果您有多个连接属性,请将它们与以下内容分开:
&
Run Code Online (Sandbox Code Playgroud)
给你这样的东西:
url="jdbc:mysql://localhost/glyndwr?autoReconnect=true&allowMultiQueries=true"
Run Code Online (Sandbox Code Playgroud)
我希望这可以帮助别人.
问候,
格林
| 归档时间: |
|
| 查看次数: |
154544 次 |
| 最近记录: |