我的sql语句报语法错误，真的看不出来

Question

Answer 1

sql语句中缺少单引号，应改为：
String sql = "update test set username='"+username+"',sex='"+sex+"', birth='"+birth+"',borth='"+borth+"',working='"+working+"',loginpass='"+loginpass+"',salary='"+salary+"' where id='"+id+"'";

在实际开发中，应该避免使用这种拼接，会出现sql注入的风险，建议采用预编译的形式，如下：
String sql = "update test set username=?, sex=?, birth=?, borth=?, working=?, loginpass=?, salary=? where id=?";
PreparedStatement prestmt = conn.prepareStatement(sql);
prestmt.setString(1,username);
prestmt.setString(2,sex);
prestmt.setString(3,birth);
prestmt.setString(4,borth);
prestmt.setString(5,working);
prestmt.setString(6,loginpass);
prestmt.setString(7,salary);
prestmt.setString(8,id);
prestms.executeUpdate();