MySQL：check the manual that corresponds to your MySQL server version for the right syntax

今天重新搞了一下JDBC，然后在写代码的时候遇到了一个蛋疼的问题，纠结了很久，抛出的异常如下：

数据库连接成功！conn=[e-mail]n: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?,?)' at line 1    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)    at java.lang.reflect.Constructor.newInstance(Constructor.java:526)    at com.mysql.jdbc.Util.handleNewInstance(Util.java:411)    at com.mysql.jdbc.Util.getInstance(Util.java:386)    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1054)    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:4237)    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:4169)    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:2617)    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2778)    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2819)    at com.mysql.jdbc.StatementImpl.executeUpdate(StatementImpl.java:1811)    at com.mysql.jdbc.StatementImpl.executeUpdate(StatementImpl.java:1725)    at org.phn.dao.test.DBUtil.main(DBUtil.java:98)**Error**:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?,?)' at line 1

就是这一句

com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?,?)' at line 1

下面是我的代码

package org.phn.dao.test;import java.sql.Connection;import java.sql.DriverManager;import java.sql.PreparedStatement;import java.sql.ResultSet;import java.sql.SQLException;import java.util.ResourceBundle;/** * @author phn * @date 2015-4-8 * @TODO 数据库操作工具类 */public class DBUtil {    static ResourceBundle rbundle = ResourceBundle.getBundle("db");    private static String driverName = rbundle.getString("className");    private static String dbUser = rbundle.getString("user");    private static String dbPass = rbundle.getString("password");    private static String dbUrl = rbundle.getString("url");    /**     * @date 2015-4-8     * @TODO 获取数据库连接     * @return Connection     */    public static Connection getConnection() {        try {            // 这里使用这种方法已经指定了new出来的Driver是mysql的驱动            // DriverManager.registerDriver(new Driver());            Class.forName(driverName).newInstance();            Connection conn = null;            conn = DriverManager.getConnection(dbUrl, dbUser, dbPass);            if (conn != null) {                System.out.println("数据库连接成功！conn=" + conn);                return conn;            }        } catch (InstantiationException e) {            // e.printStackTrace();            System.out.println("**Error**:caused at " + DBUtil.class + "."                    + new Throwable().getStackTrace()[0].getMethodName() + "::"                    + e.getMessage());        } catch (IllegalAccessException e) {            // e.printStackTrace();            System.out.println("**Error**:caused at " + DBUtil.class + "."                    + new Throwable().getStackTrace()[0].getMethodName() + "::"                    + e.getMessage());        } catch (ClassNotFoundException e) {            // e.printStackTrace();            System.out.println("**Error**:caused at " + DBUtil.class + "."                    + new Throwable().getStackTrace()[0].getMethodName() + "::"                    + e.getMessage());        } catch (SQLException e) {            // e.printStackTrace();            System.out.println("**Error**:caused at " + DBUtil.class + "."                    + new Throwable().getStackTrace()[0].getMethodName() + "::"                    + e.getMessage());        }        System.out.println("**Error**:数据库连接失败！");        return null;    }    public static void main(String[] args) {        try {            Connection conn = getConnection();            String insertSql = "INSERT INTO t_user(uname,upass) VALUES(?,?)";            if (conn != null) {                PreparedStatement pstm = conn.prepareStatement(insertSql);                pstm.setString(1, "234");                pstm.setString(2, "234");                pstm.executeUpdate(insertSql);            }        } catch (SQLException e) {            e.printStackTrace();            System.out.println("**Error**:" + e.getMessage());        }    }}

网上找了很多，然后终于在一位仁兄的博客中遇到了类似的问题，下面是这个问题的解决办法：

仔细看看我的main方法中的这一段：

PreparedStatement pstm = conn.prepareStatement(insertSql);pstm.setString(1, "234");pstm.setString(2, "234");pstm.executeUpdate(insertSql);

PrepareStatement 的方法 executeUpdate 经过了重载，即有一个带String sql参数的和一个没有带String sql参数的，这里就是由于我使用了带Sql语句参数的方法才导致出现这个问题的。

实际上使用executeUpdate（）的话sql语句中可以使用？作为参数传递。若使用executeUpdate（string sql）的话则不能使用sql语句中带?参数。