How to use

safeSqlQueryIdentifier

method

in

ca.carleton.gcrc.jdbc.JdbcUtils

    sqlQuery += JdbcUtils.safeSqlQueryIdentifier(includeString) + ",";
sqlQuery += "ST_X(ST_GeometryN(" + JdbcUtils.safeSqlQueryIdentifier(geomParm) +
  ",1)) as " + JdbcUtils.safeSqlQueryIdentifier(xnameParm) + ",";
sqlQuery += "ST_Y(ST_GeometryN(" + JdbcUtils.safeSqlQueryIdentifier(geomParm) +
  ",1)) as " + JdbcUtils.safeSqlQueryIdentifier(ynameParm) + " ";
sqlQuery += "FROM " + JdbcUtils.safeSqlQueryIdentifier(tableParm) + " ";

    sqlQuery += JdbcUtils.safeSqlQueryIdentifier(includeString) + ",";
    orderByClause += ",";
  sqlQuery += JdbcUtils.safeSqlQueryIdentifier(fieldString);
  whereClause += "lower(" + JdbcUtils.safeSqlQueryIdentifier(fieldString) + ") LIKE lower(" +
    JdbcUtils.safeSqlQueryStringValue("%" + matchText + "%") + ") ";
  if (1 == fields.size()) {
      JdbcUtils.safeSqlQueryIdentifier(fieldString) + "))";
  } else {
    if (count < (fields.size() - 1)) {
      orderByClause += "least(coalesce(nullif(position(lower(" +
        JdbcUtils.safeSqlQueryStringValue(matchText) + ") IN lower(" +
        JdbcUtils.safeSqlQueryIdentifier(fieldString) + ")), 0), 9999)";
      orderByClosing += ")";
    } else {
      orderByClause += "coalesce(nullif(position(lower(" +
        JdbcUtils.safeSqlQueryStringValue(matchText) + ") IN lower(" +
        JdbcUtils.safeSqlQueryIdentifier(fieldString) + ")), 0), 9999)";
    JdbcUtils.safeSqlQueryIdentifier(scoreParm);
sqlQuery += " FROM " + JdbcUtils.safeSqlQueryIdentifier(tableParm) +
  whereClause + "ORDER BY " + orderByClause + orderByClosing + ";";

      sqlQuery += ",";
    sqlQuery += JdbcUtils.safeSqlQueryIdentifier(selectString);
sqlQuery += " FROM " + JdbcUtils.safeSqlQueryIdentifier(tableParm);
      sqlQuery += ",";
    sqlQuery += JdbcUtils.safeSqlQueryIdentifier(group);

private String GenerateWhereClause(List<Where> whereParms) throws Exception {
  boolean firstSelect = true;
  String retVal = "";
  Iterator<Where> itWhere = whereParms.iterator();
  while( itWhere.hasNext() ) {
    Where where = itWhere.next();
    if( firstSelect ) {
      firstSelect = false;
      retVal += " WHERE ";
    } else {
      retVal += " AND ";
    }
    retVal += (JdbcUtils.safeSqlQueryIdentifier(where.getLeft()) + " " + where.getOp().getSqlQuery() + " ");
    if( null != where.getStringValue() ) {
      retVal += (JdbcUtils.safeSqlQueryStringValue(where.getStringValue()));
    } else {
      retVal += ""+where.getIntValue();
    }
  }
  return(retVal);
}