语法解析（rs.next()）

package com.example; import java.sql.Connection; import java.sql.DriverManager; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; public class Main { public static void main(String[] args) { // 连接参数（与插件配置一致） String url = "jdbc:mysql://localhost:3306/shangpin?useSSL=false&allowPublicKeyRetrieval=true"; String user = "root"; String password = "123456"; try(Connection conn = DriverManager.getConnection(url, user, password)) { System.out.println("✅ MySQL连接成功"); // 执行查询 Statement stmt = conn.createStatement(); ResultSet rs = stmt.executeQuery("SHOW TABLES"); // 输出结果 while(rs.next()) { System.out.println("表名: " + rs.getString(1)); } } catch (SQLException e) { System.err.println("❌ 连接错误: " + e.getMessage()); } } }优化

``` package jdbc; import java.sql.Connection; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import java.util.Scanner; /** * 用户登录功能 * * 程序启动后，要求用户输入用户名和密码，然后判断用户名和密码 * 用该用户名和密码做为过滤条件去user表中查询对应记录 * 如果查询到记录则表示登录信息与曾经注册时输入的信息一致，那么登录成功，否则登录失败。 * * SELECT id, username, password * FROM user * WHERE username='用户输入的用户名' and password='用户输入的密码' */ public class LoginDemo { public static void main(String[] args) { System.out.println("欢迎来到登录界面"); Scanner scanner = new Scanner(System.in); System.out.println("请输入用户名："); String username = scanner.next(); System.out.println("请输入密码："); String password = scanner.next(); if ("exit".equals(username)) { System.out.println("退出程序"); return; } try { Connection connection = DBUtil.getConnection(); Statement statement = connection.createStatement(); String sql = "SELECT * FROM user " + "WHERE username='" + username + "' AND password='" + password + "'"; ResultSet rs = statement.executeQuery(sql); if (rs.next()){ System.out.println("登录成功"); }else { System.out.println("登录失败"); } } catch (SQLException e) { e.printStackTrace(); } } }```"C:\Program Files\Java\jdk-17\bin\java.exe" "-javaagent:D:\IntelliJ IDEA 2024.3.4\lib\idea_rt.jar=64463" -Dfile.encoding=UTF-8 -classpath D:\java-student\JSD2502_SSM\JDBC\target\classes;C:\Users\2003q\.m2\repository\mysql\mysql-connector-java\8.0.15\mysql-connector-java-8.0.15.jar;C:\Users\2003q\.m2\repository\com\google\protobuf\protobuf-java\3.6.1\protobuf-java-3.6.1.jar jdbc.LoginDemo 欢迎来到登录界面 请输入用户名： aiania 请输入密码： 1' OR '1'='1 java.sql.SQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1 at com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:120) at com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:97) at com.mysql.cj.jdbc.exceptions.SQLExceptionsMapping.translateException(SQLExceptionsMapping.java:122) at com.mysql.cj.jdbc.StatementImpl.executeQuery(StatementImpl.java:1218) at jdbc.LoginDemo.main(LoginDemo.java:38) 进程已结束，退出代码为 0