【发布时间】:2020-07-15 13:13:26
【问题描述】:
import java.sql.PreparedStatement;
myQuery = "UPDATE File SET BCN = ?, BLN = ?, BID = ?,
DATE2 = (CASE WHEN parmDate <> 0 AND DATE2 = 0
THEN parmDate
ELSE DATE2 END)
WHERE ERF = " + String.valueOf(erfNr).trim();
db2Stmt = db2Conn.prepareStatement(myQuery);
db2Stmt.setString(1, String.format("%017d", erfNr));
db2Stmt.setInt(2, f3BLin);
db2Stmt.setInt(3, entryBufferId);
db2Stmt.setInt(4, parmDate); // <== ???
db2Stmt.executeUpdate();
我想更新file 中的字段date2。
我必须如何处理案例结构?
parmDate 是一个过度给定的参数。
我得到了 db2Stmt.setInt(8, parmDate) 的数据截断; 在数据库文件中,该字段为十进制 8,0。
为什么要截断?
String myQuery = "";
int erfNr, f3BLin, entryBufferId, parmDate ;
erfNr = 11183594;
f3BLin = 9;
entryBufferId = 999;
parmDate = 19700323;
// Update-Statement
try {
myQuery = "UPDATE FILE SET t_BCN = ?, t_BLN = ?, t_BZO = ?, t_BID = ?, t_AND = ?, t_ANT = ?, t_AUS = ?, " +
"t_DATE2 = (CASE WHEN ? <> 0 AND t_DATE2 = 0 THEN ? ELSE t_DATE2 END)"
+ " WHERE t_ERF = ? ";
SimpleDateFormat sdfTime = new SimpleDateFormat("HHmmss");
SimpleDateFormat sdfDate = new SimpleDateFormat("yyyyMMdd");
int t_AnD = Integer.valueOf(sdfDate.format(new Date()));
int t_AnT = Integer.valueOf(sdfTime.format(new Date()));
db2Stmt = db2Conn.prepareStatement(myQuery);
db2Stmt.setString(1, String.format("%017d", erfNr));
db2Stmt.setInt(2, f3BLin);
db2Stmt.setString(3, " ");
db2Stmt.setInt(4, entryBufferId);
db2Stmt.setInt(5, t_AnD);
db2Stmt.setInt(6, t_AnT);
db2Stmt.setString(7, as400CurrentUser.trim() + "§");
db2Stmt.setInt(8, parmDate ); <==
db2Stmt.setInt(9, parmDate );
db2Stmt.setInt(10, erfNr);
db2Stmt.executeUpdate();
// int resultCode = db2Stmt.executeUpdate();
}
例外
java.sql.DataTruncation: Data truncation
at com.ibm.as400.access.AS400JDBCPreparedStatement.testDataTruncation(AS400JDBCPreparedStatement.java:3265)
at com.ibm.as400.access.AS400JDBCPreparedStatement.setValue(AS400JDBCPreparedStatement.java:3176)
at com.ibm.as400.access.AS400JDBCPreparedStatement.setInt(AS400JDBCPreparedStatement.java:2507)
at com.hji.service.DamageService.TestUpdateFAHRZPP(DamageService.java:3359)
at com.hji.controller.DamageController.checkRestApiTest(DamageController.java:1244)
这部分正在工作:
"t_DATE2 = (CASE WHEN " + String.valueOf(parmDate) + " <> 0 AND t_DATE2 = 0 THEN "+ String.valueOf(parmDate) +" ELSE t_DATE2 END)"
【问题讨论】:
-
"我必须如何处理案例结构?"你什么意思?
-
我对原始 SQL 查询不是很擅长,但是该查询对注入是开放的。最后一个
ERF = ...应该是和其他参数一样的参数。 -
使用
THEN ?,就像使用其他占位符一样。您还应该为 where 参数使用占位符(就像@Json 所说):WHERE ERF = ? -
应该是
WHERE ERF = ?...并加上那个参数, -
这是一个多行字符串吗?它是如何工作的?