I have following code for deleting a value from database:

1 次查看（过去 30 天）
Athfin I
Athfin I 2019-5-3
评论： Athfin I 2019-5-4
a=get(handles.edit1,'String');
a=convertCharsToStrings(a);
sql=['delete from student where usn=''',a]
curs=fetch(conn,sqlquery);
  1 个评论
Walter Roberson
Walter Roberson 2019-5-3
User's tag says,
this code gives error for value of a='4cs012' as: expected input to be string scalar or character vector

请先登录，再进行评论。

请先登录，再回答此问题。

回答（1 个）

Walter Roberson
Walter Roberson 2019-5-3
You converted a to string data type. When you use [character_vector, string_object] then it converts the character vector to a string object and then forms the nonscalar string array, which is not valid for conn.
Either do not convert a to string object or else use string concatenation which is the + operation
'delete from etc' + a
By the way, you are more likely to be successful if you remember the " character that is needed to terminate the command that is sent, to match the one just before you drop in the variable.
  3 个评论
显示 1更早的评论
Guillaume
Guillaume 2019-5-3
编辑：Guillaume 2019-5-3
At this point, the problem is nothing to do with matlab. You need to learn to write valid SQL queries. In particular, in SQL string literals needs to be enclosed in single or double quotes. The error message you get is entirely correct, if 4cs012 is not enclosed in quotes in the query, then it is interpreted as a column name.
SQL statements also need to be terminated with a semicolon.
Probably the easiest way to build your query is with:
sql = sprintf('delete from student where usn = "%s";', a);
<rant> The biggest problem with your code is that it's open to SQL injection. I don't understand why people are stll taught to build SQL queries that depend on user input this way instead of using prepared statements which are not vulnerable to SQL injection. If a user enters "; drop table student;-- in your edit control, they will have deleted your table. (famous XKCD published 12 years ago, and people still do it!) </rant over>
Athfin I
Athfin I 2019-5-4
Thanks a lot. That worked for me, but semicolumn wasn't necessary.

请先登录，再进行评论。

类别

在 Help Center 和 File Exchange 中查找有关 Characters and Strings 的更多信息

标签

尚未输入任何标签。

Community Treasure Hunt

Find the treasures in MATLAB Central and discover how the community can help you!

Start Hunting!

Translated by