error jsp regarding sqlexception pls help
<html>
<head>
<title>Search Results</title>
</head>
<body bgcolor="thistle" text="olive">
<CENTER>
<H1> <u>Online Shopping Cart</u> </H1>
<font size="5" >Search Results</font>
</CENTER>
<a href="Logout.jsp" ><font size="4" >Click here to Logout</font></a>
<%@ page language="java" import="java.sql.*" %>
<%
String str_searchvar=null;
int chk_ctr=0;
String str_colvar=null;
String tab_var="";
String user_src=(String)session.getValue("user");
if (user_src!=null)
{
String query=null;
Connection conn;
conn=null;
ResultSet rs;
rs=null;
if(request.getParameter("R1").equals("Title"))
{
str_searchvar=request.getParameter("BookTitle");
str_colvar="Title";
}
if(request.getParameter("R1").equals("Category"))
{
chk_ctr=1;
str_searchvar=request.getParameter("BookCategory");
str_colvar="CategoryName";
}
if(request.getParameter("R1").equals("Publisher"))
{
str_searchvar=request.getParameter("BookPublisher");
str_colvar="Publisher";
}
if(request.getParameter("R1").equals("Author"))
{
str_searchvar=request.getParameter("BookAuthor");
str_colvar="Author";
}
if (request.getParameter("R2")==null)
{
tab_var="Book_Details";
}
else
{
// to get the name of the table in which the search to be done-
if (request.getParameter("R2").equals("A"))
{
tab_var="Temp_Detail";
}
else
{
tab_var="Book_Details";
}
}
query = "select a.* from "+tab_var+" a, Category_Details b where a."+str_colvar+" =' "+str_searchvar+" ' and a.CATEGORYID = b.CATEGORYID";
try
{
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
conn =DriverManager.getConnection("jdbc:odbc:data");
Statement stat=conn.createStatement();
Statement stat_del=conn.createStatement();
Statement stat_ins=conn.createStatement();
rs = stat.executeQuery(query);
int ctr=0;
%>
<form name="cart" action="Inter_Cart.jsp" method="POST">
<table border=1>
<tr>
<td>S.No</td>
<td>Select</td>
<td>Book Name</td>
<td>Author Name</td>
<td>Publisher</td>
<td>Edition</td>
<td>Price (in Rs.)</td>
<td>Quantity Available(Nos.)</td>
<td>Description</td>
</tr>
<%
ResultSet rs1=null;
String delete_query="Delete from Temp_Detail";
String ins_query=null;
int int_BOOKID,int_CATEGORYID,int_PRICE,int_QUANTITY;
String str_TITLE,str_AUTHOR,str_PUBLISHER,str_EDITION,str_DESCRIPTION;
int rs_del=stat_del.executeUpdate(delete_query);
while(rs.next())
{
ctr=ctr+1;
out.println("<tr><td>"+ctr);
int_BOOKID=rs.getInt(1);
out.println("<td><input type=checkbox name=chk"+ctr+" value="+int_BOOKID+">");
int_CATEGORYID=rs.getInt(2);
str_TITLE=rs.getString(3);
out.println("<td>");
out.println(str_TITLE);
str_AUTHOR=rs.getString(4);
out.println("<td>");
out.println(str_AUTHOR);
str_PUBLISHER=rs.getString(5);
out.println("<td>");
out.println(str_PUBLISHER);
str_EDITION=rs.getString(6);
out.println("<td>");
out.println(str_EDITION);
int_PRICE=rs.getInt(7);
out.println("<td>");
out.println(int_PRICE);
int_QUANTITY=rs.getInt(8);
out.println("<td>");
out.println(int_QUANTITY);
str_DESCRIPTION=rs.getString(9);
out.println("<td>");
out.println(str_DESCRIPTION);
out.println("<td>");
out.println(rs.getString(10));
out.println("<tr>");
ins_query ="INSERT INTO Temp_Detail VALUES ("+int_BOOKID+","+int_CATEGORYID+",'"+str_TITLE+"','"+str_AUTHOR+"','"+str_PUBLISHER+"','"+str_EDITION+"',"+int_PRICE+","+int_QUANTITY+",'"+str_DESCRIPTION+"')";
int rs_ins=stat_ins.executeUpdate(ins_query);
}
String str_ctr=String.valueOf(ctr);
session.putValue("ctr_val",str_ctr);
Statement stat_combo=conn.createStatement();
ResultSet rscombo=null;
String query1="Select * from Category_Details";
rscombo=stat_combo.executeQuery(query1);
%>
</table>
<input type="submit" value="Add to Cart" name="Add">
</form>
<hr>
<font size="5">Search More</font>
<form name="newsrc" action="Searchfin.jsp" method="POST">
<table border=1>
<tr>
<td>
<input type="radio" value="Category" checked name="R1"></td>
<td>
Search Based on Category</td>
<td>
<Select size="1" name="BookCategory">
<option selected value="Select">Select
Category</option>
<%
while(rscombo.next())
{
String category=rscombo.getString(2);
%>
<option value=<%=category%>
<%=category%>
</option>
<%}%>
</Select>
</td>
</tr>
<tr>
<td>
<tr>
<td><input type="radio" name="R1" value="Title"></td>
<td>Search book by Title</td>
<td><input type="text" name="BookTitle" size="25"></td>
</tr>
<tr>
<td ><input type="radio" name="R1" value="Author"></td>
<td>Search by book author</td>
<td><input type="text" name="BookAuthor" size="25"></td>
</tr>
<tr>
<td><input type="radio" name="R1" value="Publisher"></td>
<td>Search by publisher</td>
<td><input type="text" name="BookPublisher" size="25"></td>
</tr>
<tr>
<td><input type="radio" name="R2" value="A">Advanced Search</td>
<td>Search by publisher</td>
<td><input type="text" name="R2" value="N" checked>New Search</td>
<td><input type="submit" value="Search"></td>
</tr>
</table>
</form>
<%}
catch(Exception e)
{
out.println("error"+e);}
finally
{
rs.close();
conn.close();
}
}
else
{
response.sendRedirect("Unauthorised.htm");
}
%>
</body>
</html>

