· 9 years ago · Sep 04, 2017, 05:28 PM
1package Main;
2
3import java.sql.Connection;
4import java.sql.DriverManager;
5import java.sql.PreparedStatement;
6import java.sql.SQLException;
7
8public class Tester{
9 private static Connection db;
10 private static PreparedStatement stmt;
11 final static String URL = "jdbc:mysql://127.0.0.1:3306/";
12 final static String DB_NAME = "hackeru";
13 final static String USER_NAME = "root";
14 final static String USER_PASS = "";
15 private static String aBrandName[]= {"ZTE","Nokia","OPO","HTC"};
16 private static int aPrice[] = {900,2500,2900,3250};
17 private static int aQty[] = {5,3,2,7};
18 public static void main(String[] args) throws Exception {
19 // creating our connection string
20
21 // creating a connection to our database
22 db = DriverManager.getConnection(URL + DB_NAME, USER_NAME, USER_PASS);
23 //create table for the first time, and if the table exists do not create it....
24 //createTable();
25
26 //insert first data to our mySQL with JDBC
27 //insertFirstDemo();
28
29 //insert data in secured way.... (no SQL injection)
30 //saferInsert();
31
32 //insert array of data....
33 for (int counter=0;counter<aBrandName.length;counter+=1)
34 {
35 saferInsert2(aBrandName[counter], aPrice[counter], aQty[counter]);
36 }
37 System.out.println("I was finished, yeah MAN!");
38 }
39
40 private static void saferInsert2(String brandName, int price, int qty) throws Exception
41 {
42 //assume there is a table phones with name,price,qty 1 2 3
43 String sql="INSERT INTO phones (name,price,qty) VALUES (?,?,?)";
44 PreparedStatement stmt = db.prepareStatement(sql); //prepare statement with 3 parms
45 stmt.setString(1, brandName); //bind string param as first param (first question mark)
46 stmt.setInt(2, price); //bind int param as second param (second question mark)
47 stmt.setInt(3, qty); //bin int param as third param (becuase there is no f*** way that i will buy again apple, me want android
48 stmt.execute();
49 }
50
51 private static void saferInsert() throws Exception
52 {
53 //assume there is a table phones with name,price,qty 1 2 3
54 String sql="INSERT INTO phones (name,price,qty) VALUES (?,?,?)";
55 PreparedStatement stmt = db.prepareStatement(sql); //prepare statement with 3 parms
56 stmt.setString(1, "Iphone 7 plus"); //bind string param as first param (first question mark)
57 stmt.setInt(2, 4300); //bind int param as second param (second question mark)
58 stmt.setInt(3, 1); //bin int param as third param (becuase there is no f*** way that i will buy again apple, me want android
59 stmt.execute();
60 }
61
62 private static void insertFirstDemo() {
63 // create a SQL command.
64 String sql = "INSERT INTO chocos (name) "
65 + "values ('Para'),('Milka'),('Oreo'),('Bueno'),"
66 + "('Ferror Roche');";
67
68 try {
69 // prepare statement for given SQL
70 stmt = db.prepareStatement(sql);
71 // execute the statement
72 stmt.execute();
73
74 } catch (SQLException e) {
75 // TODO Auto-generated catch block
76 e.printStackTrace();
77 }
78 System.out.println("Data was inserted");
79 }
80
81 private static void createTable() {
82 // create a SQL command.
83 String sql = "CREATE TABLE IF NOT EXISTS chocos" + " (id INT PRIMARY KEY AUTO_INCREMENT,"
84 + " name VARCHAR (16) NOT NULL);";
85
86 try {
87 // prepare statement for given SQL
88 stmt = db.prepareStatement(sql);
89 // execute the statement
90 stmt.execute();
91
92 } catch (SQLException e) {
93 // TODO Auto-generated catch block
94 e.printStackTrace();
95 }
96
97 System.out.println("Table was created");
98 }
99
100 private static String strValues(String[] strs)
101 {
102 StringBuilder values = new StringBuilder();
103 char del = ' ';
104 for (String str:strs)
105 {
106 values.append(del).append("('").append(str).append("')");
107 if (del == ' ') del=',';
108 }
109 return values.toString();
110 }
111}