MySQL constant error

Hello Bukkit,

I am writing a plugin that will insert into a MySQL database for IP.Board if someone gets a warning

but I keep on getting this error, Please note: I write mainly for PHP with MySQL and can fix 99% of the bugs on that, but this one the code is, as far as I can see is perfect, and has been referenced with other plugins i've done.

code:

Code:java

if(args[1].equalsIgnoreCase("Spam")) {
SimpleDateFormat dt = new SimpleDateFormat("dd-MM-yyyy");
SimpleDateFormat td = new SimpleDateFormat("hh:mm:ss a");
Date dtu = new Date();
Date tdu = new Date();
String theName = args[0];
Connection con = null;
try {
con = DriverManager.getConnection("jdbc:REDACTED);
String query = "SELECT * FROM topics WHERE title='" + theName + "' AND forum_id='99'";
Statement stmt = null;
ResultSet rs = null;
stmt = con.createStatement();
rs = stmt.executeQuery(query);
if(rs.next() == true) {
int tid = rs.getInt(1);
sender.sendMessage("[Punishment] Attempting update");
String query1 = "UPDATE topics SET last_poster_id='899' WHERE tid='" + tid + "'";
stmt.executeUpdate(query1);
sender.sendMessage("[Punishment] Update complete, starting insert");
String query2 = "INSERT INTO posts (`pid`,`author_id`,`author_name`,`post`) VALUES ('" + tid + "','899','SYSTEM','<p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Username: " + theName + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Action Taken: Warned</p></span><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reason for Action: Spamming via Message, Signs or Chat.</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Time and Date of Event: " + dt.format(dtu) + " at " + td.format(tdu) + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Server Address: " + server + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reported by: '" + issuer + "'";
stmt.executeUpdate(query2);
sender.sendMessage("§7Report Filed. Thank you for using Punishment records");
} else {
sender.sendMessage("[Punishment] Attempting Instert - Topic");
String query1 = "INSERT INTO topics (`title`,`state`,`posts`,`starter_id`,`start_date`,`starter_name`,`last_poster_name`,`forum_id`,`approved`,`author_mode`,`title_seo`,`seo_last_name`,`seo_first_name`) VALUES ('" + theName + "','open','0','899','" + timestamp + "','SYSTEM','SYSTEM','99','1','1','" + theName + "','" + issuer + "','" + issuer + "');";
stmt.executeUpdate(query1);
sender.sendMessage("[Punishment] Attempting Data pull");
String query2 = "SELECT * FROM topics WHERE title='" + theName + "'";
ResultSet rs2 = null;
rs2 = stmt.executeQuery(query2);
if(rs2.next() == true) {
int tid = rs2.getInt(1);
sender.sendMessage("[Punishment] Attempting insert - post");
String query3 = "INSERT INTO posts (pid,author_id,author_name,post) VALUES ('" + tid + "','899','SYSTEM','<p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Username: " + theName + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Action Taken: Warned</p></span><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reason for Action: Spamming via Message, Signs or Chat.</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Time and Date of Event: " + dt.format(dtu) + " at " + td.format(tdu) + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Server Address: " + server + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reported by: '" + issuer + "";
stmt.executeUpdate(query3);
sender.sendMessage("[Punishment] Attempting update");
String query4 = "UPDATE topics SET last_poster_id='899' WHERE tid='" + tid + "'";
stmt.executeUpdate(query4);
 
}
sender.sendMessage("§7Report Filed. Thank you for using Punishment records");
 
}
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
sender.sendMessage("§7I have failed my job. Please report to NoMansLand that i'm having a spaz attack.");
}
try {
con.close();
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
return true;

Error Log:

Code:

[20:38:05] [Server thread/WARN]: com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'CONSOLE' at line 1
[20:38:05] [Server thread/WARN]:    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
[20:38:05] [Server thread/WARN]:    at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
[20:38:05] [Server thread/WARN]:    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
[20:38:05] [Server thread/WARN]:    at java.lang.reflect.Constructor.newInstance(Unknown Source)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.Util.handleNewInstance(Util.java:407)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.Util.getInstance(Util.java:382)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1052)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3593)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3525)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1986)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2140)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2620)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.StatementImpl.executeUpdate(StatementImpl.java:1662)
[20:38:05] [Server thread/WARN]:    at com.mysql.jdbc.StatementImpl.executeUpdate(StatementImpl.java:1581)
[20:38:05] [Server thread/WARN]:    at net.myfallen.punishment.commands.onCommand(commands.java:52)
[20:38:05] [Server thread/WARN]:    at org.bukkit.command.PluginCommand.execute(PluginCommand.java:44)
[20:38:05] [Server thread/WARN]:    at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:199)
[20:38:05] [Server thread/WARN]:    at org.bukkit.craftbukkit.v1_7_R1.CraftServer.dispatchCommand(CraftServer.java:547)
[20:38:05] [Server thread/WARN]:    at org.bukkit.craftbukkit.v1_7_R1.CraftServer.dispatchServerCommand(CraftServer.java:534)
[20:38:05] [Server thread/WARN]:    at net.minecraft.server.v1_7_R1.DedicatedServer.aw(DedicatedServer.java:309)
[20:38:05] [Server thread/WARN]:    at net.minecraft.server.v1_7_R1.DedicatedServer.u(DedicatedServer.java:274)
[20:38:05] [Server thread/WARN]:    at net.minecraft.server.v1_7_R1.MinecraftServer.t(MinecraftServer.java:560)
[20:38:05] [Server thread/WARN]:    at net.minecraft.server.v1_7_R1.MinecraftServer.run(MinecraftServer.java:467)
[20:38:05] [Server thread/WARN]:    at net.minecraft.server.v1_7_R1.ThreadServerApplication.run(SourceFile:617)

 

1. PreparedStatements are better than Statements
2. Can you please post line 52?

 

Line 52:

Code:java

                        String query1 = "UPDATE topics SET last_poster_id='899' WHERE tid='" + tid + "'";
 

 

Code:

String query2 = "INSERT INTO posts (`pid`,`author_id`,`author_name`,`post`) VALUES ('" + tid + "','899','SYSTEM','<p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Username: " + theName + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Action Taken: Warned</p></span><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reason for Action: Spamming via Message, Signs or Chat.</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Time and Date of Event: " + dt.format(dtu) + " at " + td.format(tdu) + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Server Address: " + server + "</span></p><p><span style=\"color:rgb(90,90,90);font-family:tahoma, helvetica, arial, sans-serif;font-size:12px;\">Reported by: '" + issuer + "'";

You are missing the closing bracket of your VALUES statement.
Also make sure you escaped all special characters to not mess up your query.