sql拼接單引號的處理

示例：

若沒有變量很簡單：

String sql = "SELECT * FROM user WHERE name= 'Jack' and password = '123456' ";

若有變量進行動態拼接，寫法如下：

String sql = "SELECT * FROM user WHERE name= '"+name+"' and password = '"+password+"' ";

步驟：

SELECT * FROM user WHERE name= '' and password = '' ;

先在'' 中添加 ""

SELECT * FROM user WHERE name= '""' and password = '""' ;

然后在 " " 中添加兩個+號，然后在 ++ 中添加 要動態傳入的字符串，然后把語句 復制到 String sql = **" "**; 中的引號中

String sql = "SELECT * FROM user WHERE name= '"+name+"' and password = '"+password+"' ";