如何在SQL查询中插入变量

Question

我有测试脚本，productId存储在文本文件中，我可以使用read方法来检索它。

import static org.assertj.core.api.Assertions.*
import groovy.json.JsonOutput as JsonOutput
import groovy.json.JsonSlurper as JsonSlurper
import internal.GlobalVariable as GlobalVariable
import internal.GlobalVariable
import com.kms.katalon.core.configuration.RunConfiguration
import java.sql.*
import java.io.File

//Read productId
def productId = new File(RunConfiguration.getProjectDir() + "/Data Files/productId.txt")

//SQL statement
String dbQuery2 = /SELECT * FROM db.table1 where productId= @productId order by lastmodificationdateutc desc/

我如何使用@作为变量并将其替换为“ productId.text”？

我已经尝试过以下代码，但是不起作用如果可以使用此方法，请纠正我？

    String dbQuery2 = "SELECT * FROM db.table1 where productId = ?"
    def productId = new File(RunConfiguration.getProjectDir() + "/Data Files/productId.txt")
    PreparedStatement stmt = con.prepareStatement(dbQuery2)
    stmt.setString(1, productId.text)
    ResultSet resultSet = preparedStatement.executeQuery()

ResultSet resultSet = stmt.executeQuery()

//Connect to PostgresSQL, global variable is stored at profile
List resultSet = CustomKeywords.'test.database.getPostgresSQLResults'(GlobalVariable.dbConnString2 , GlobalVariable.dbUsername2 , GlobalVariable.dbPassword2 ,GlobalVariable.dbDriver2 ,dbQuery2 )

下面是无需准备声明即可工作的代码

脚本中的连接字符串

//to connect PostgresSQL server
    @Keyword
    def List getPostgresSQLResults (String dbConnString2 , String dbUsername2 , String dbPassword2 , String dbDriver2 , String dbQuery2){

        Sql sql = Sql.newInstance(dbConnString2,dbUsername2,dbPassword2,dbDriver2)

        List results = sql.rows(dbQuery2)

        return results

        sql.close()
    }

Answer 1

您未使用准备好的语句。尝试以下代码：

String dbQuery2 = "SELECT * FROM db.table1 where productId = ?"
def productId = new File(RunConfiguration.getProjectDir() + "/Data Files/productId.txt")
PreparedStatement stmt = con.prepareStatement(dbQuery2)
stmt.setString(1, productId.text)
ResultSet resultSet = stmt.executeQuery()