jsp ´«stringÀàÐͲÎÊý

ÎÒµÄÒ»¸öjsp²¿·Ö´úÂ룬ÆäÖÐidÊÇÉÏÒ»¸öÒ³Ãæ´«¹ýÀ´µÄ²ÎÊý£¨Êý¾Ý¿â²éѯµÃµ½µÄ¶¯Ì¬Êý¾Ý£©£º

String id;
try
{
id= request.getParameter("id");
}catch(Exception e){
id="wrong";
}
%>
<%
String DBURL="jdbc:postgresql://localhost/postgres";
String  user="postgres";
String password="postgres";
Connection con=null;
Statement stmt=null;
ResultSet rs=null;
String sqlString1=null;
try{
  Class.forName("org.postgresql.Driver").newInstance();
  con=DriverManager.getConnection(DBURL,user,password);
  }catch(ClassNotFoundException e){
    out.println("ClassNotFoundException:"+e.getMessage());
  }
if(id!="wrong"){
sqlString1="select office_id,company_name,line_1_label_address,line_2_label_address,line_3_label_address,line_4_label_address,line_5_label_address,postal_code,telephone,facsimile,email from xinaddress where company_name="+id;

ÎÒÔËÐÐʱ£¬ÎÒ´ÓÉÏÒ»¸öÒ³Ãæ½øÕâ¸öÒ³Ãæʱ×ÜÊdzöÏÖ´íÎó£¬
˵
SQL Exception!:ERROR: syntax error at or near "Shipping"
µ«ÊÇÎÒÈç¹û´«µÄ²ÎÊýÊÇintÀàÐÍʱ
ÉÏÃæÓÃ
int id;
try
{
id= Integer.parseInt(request.getParameter("id"));
}catch(Exception e){
id=0;