CODEWITHSUNDEEP
javajspjakarta-ee
magicianiam
magicianiam

Reputation: 1579

null pointer exception error when checking for null variables

<%@page import="java.sql.*"%>
<%@page import="java.util.*"%>
<%@page import="java.lang.*"%>

<%
String fname=request.getParameter("firstname");
String lname=request.getParameter("lastname");
String bday=request.getParameter("birthday");
String user="";
user = request.getParameter("username");
String pass="";
pass = request.getParameter("password");



try {
if(user.isEmpty() && pass.isEmpty()){
Class.forName("com.mysql.jdbc.Driver");
Connection conn = DriverManager.getConnection("jdbc:mysql://localhost/mydb", "root", "user");

String sql = "Insert into users (firstname, lastname, username, password) values('"+fname+"', '"+lname+"', '"+user+"', '"+pass+"')";
Statement stmt = conn.createStatement();

stmt.execute(sql);

conn.close();
response.sendRedirect("profile.jsp");
}

} catch (ClassNotFoundException e) {
e.printStackTrace();
} catch (SQLException e) {
e.printStackTrace();
}   
%>

<html>
<body>
<form method="post">
First Name:
<input type="text" name="firstname"/>
<br>
Last Name:
<input type = "text" name="lastname"/>
<br>
Birthdate:
Day: <select name="day">
<%
for(int x=1;x<32;x++){
%>
<option value= <% out.println(x); %> ><% out.println(x); %></option>
<%
}
%>
</select>
Month: <select name="month">
<%
for(int y=1;y<13;y++){
%>
<option value= <% out.println(y); %> ><% out.println(y); %></option>
<%
}
%>
</select>
Year: <select name="year">
<%
for(int z=1985;z<2030;z++){
%>
<option value= <% out.println(z); %> ><% out.println(z); %></option>
<%
}
%>
</select>
<br>
Username:
<input type="text" name="username"/>
<br>
Password:
<input type="password" name = "password"/>
<br>
<input type="submit" value="Register"/>
</form>
</body>
</html>

i get the error:

HTTP Status 500 -

type Exception report

message

descriptionThe server encountered an internal error () that prevented it from fulfilling this request.

exception

org.apache.jasper.JasperException: java.lang.NullPointerException root cause

java.lang.NullPointerException

Upvotes: 1

Views: 1696

Answers (5)

Jimi Kimble
Jimi Kimble

Reputation: 504

You are assinging an empty String and then replacing it immediately with a new value from request.getParameter. This will overwrite you initialized value, so that if the parameter is null, you will have a null value for user and pass. Then if you call isEmpty on the null String object you will get the NullPointerException

Upvotes: 1

Manoj Pilania
Manoj Pilania

Reputation: 666

Try with isNullOrEmpty() is place of isEmpty()

Upvotes: 0

Sergey Kalinichenko
Sergey Kalinichenko

Reputation: 726569

Leaving the Bobby Tables problem aside, you need to null-check your variables before calling method on them:

if(user != null && !user.isEmpty() && pass != null && !pass.isEmpty()){
}

But before this code gets into production, you owe it to yourself to fix your SQL injection problem. Otherwise, your database is at grave risk of being wiped out by a "scriptie kid" next door. Make your SQL statement parameterized, and bind values to it, rather than embedding the values into the statement.

String sql = "Insert into users (firstname, lastname, username, password) values(?,?,?,?)";
// Bind values to

Finally, it appears that you plan to store passwords in the database. Do not do that, even in a toy database that you do not plan to deploy to the Internet. That's the worst thing that you can do to your customers, even the internal ones. Read this answer to fix this problem.

Upvotes: 7

Steve
Steve

Reputation: 350

Try replacing

if(user.isEmpty() && pass.isEmpty()){

with

if((user != null && pass != null) && (user.isEmpty() && pass.isEmpty())) {

Upvotes: 1

Brian Agnew
Brian Agnew

Reputation: 272277

You're not checking user is null. You're assuming it's not null and then checking it's empty. You need to check nullness prior to checking if it's empty.

Perhaps Apache Commons StringUtils.isBlank() may be of use for conciseness/reliability ?

Upvotes: 4

Related Questions