sql syntax error...

I'm attempting to add a row to a pre-established table everytime a player joins the server.

this is my method...

Code:

    public static void addPlayer(ChunkProtection plugin, String name) throws SQLException {
        Connection con = connect(plugin);
        String player = name;
        Statement st = con.createStatement();
        st.executeUpdate("" +
                "INSERT INTO PLAYERS (NAME, TOKENS)" +
                "VALUES (" + player + ", 0);");
    }

Code:

    @EventHandler
    public void onPlayerJoin(PlayerJoinEvent event) throws SQLException {
        String player = event.getPlayer().getName();
        sql.addPlayer(this, player);
    }

subspec (the name found in the error code) is my minecraft username...

can anyone help?

(edit) almost forgot the stacktrace ....

 

Perhaps put single quotes around the string input value? Here's a revised query:

"INSERT INTO PLAYERS (NAME, TOKENS)" +
"VALUES ('" + player + "', 0);"

Personally, I put single quotes on all values... Maybe overkill, but meh.

 

thats actually a brilliant idea i haven't even thought of before.... time to give it a try...

 

Yep, that should work.

 

lol, thanks guys. fixed the issue right away [SOLVED]