向数据库中传入String变量

Question

String sql = "insert into User values('" + username + "','"+
password1 + "','" + sex + "','" + phoneNumber + "','"+
email + "','" + hobby + "')";
st.executeUpdate(sql);

应该是这里 哪里错了呢
com.microsoft.sqlserver.jdbc.SQLServerException: 关键字 'User' 附近有语法错误。

Answer 1

 user在sqlserver中是关键字，需要[user]方式表示
 String sql = "insert into [User] values('" + username + "','"+ 
password1 + "','" + sex + "','" + phoneNumber + "','"+
email + "','" + hobby + "')";