how can i find out words from string that contain special char

Question

How can i find out words from a string that contain special char Ex:

String sqlQuery="INSERT INTO TABLE(ID) VALUES(#ABC_11#),(#ABCDE_12#)";

o/p:

ABC_11
ABCDE_12

Welcome to StackOverflow. Would you kindly be more specific with your question so we can help you better? What do you mean by special character, for example? — adickinson, Oct 16 '18 at 08:49
try this :https://stackoverflow.com/questions/1805518/replacing-all-non-alphanumeric-characters-with-empty-strings — soorapadman, Oct 16 '18 at 08:50
String sqlQuery="INSERT INTO TABLE(ID) VALUES(#ABC_11#),(#ABCDE_12#)"; — mukta, Oct 16 '18 at 08:51
No : from String "INSERT INTO TABLE(ID) VALUES(#ABC_11#),(#ABCDE_12#)"; find out # values like ABC_11 & ABCDE_12 — mukta, Oct 16 '18 at 08:54
Looks like you're trying to manually insert parameters in your SQL query. That makes you vulnerable to [SQL Injection](https://en.wikipedia.org/wiki/SQL_injection). Learn about "parameterized queries" and use those instead! — S.L. Barth, Oct 16 '18 at 09:03

score 1 · Answer 1 · answered Oct 16 '18 at 09:00

try this

String sqlQuery="INSERT INTO TABLE(ID) VALUES(#ABC_11#),(#ABCDE_12#)";
        Matcher matcher = Pattern.compile("#(.*?)#").matcher(sqlQuery);
        while (matcher.find()) {
            System.out.println(matcher.group().replaceAll("#",""));
        }

Output

ABC_11
ABCDE_12

score 0 · Answer 2 · answered Oct 16 '18 at 09:06

You need to clean your input names first.
This might help you:

//your dirty name inputs
String dirty_name = "#ABC_11#"

//removes special characters like [~!@#$%^&*()-=+]
String name = dirty_name.replace('[^\w]','')

//put in your query
String sqlQuery="INSERT INTO TABLE(ID) VALUES("+name+")"

how can i find out words from string that contain special char

2 Answers2