java.lang.IllegalArgumentException: No position...

異常：

java.lang.IllegalArgumentException: No positional parameters in query: FROM ContrastRelation dict WHERE dict.dicid='abc' and dict.parentid='0' at org.hibernate.impl.AbstractQueryImpl.setParameter(AbstractQueryImpl.java:191) at org.hibernate.impl.AbstractQueryImpl.setParameter(AbstractQueryImpl.java:438) at org.springframework.orm.hibernate3.HibernateTemplate$29.doInHibernate(HibernateTemplate.java:804) at org.springframework.orm.hibernate3.HibernateTemplate.execute(HibernateTemplate.java:356) at org.springframework.orm.hibernate3.HibernateTemplate.find(HibernateTemplate.java:798) at com.krm.standard.contrastrelation.dao.hibernate.ContrastRelDAOHibernate.getContrastRelByPD(ContrastRelDAOHibernate.java:122) at com.krm.standard.contrastrelation.services.impl.ContrastRelServiceImpl.getContrastRelByPD(ContrastRelServiceImpl.java:89) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:292) at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:155) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:122) at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:144) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:174) at $Proxy102.getContrastRelByPD(Unknown Source) at com.krm.standard.contrastrelation.web.action.ContrastRelationAction.save(ContrastRelationAction.java:99) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:276) at com.krm.slsint.common.web.action.BaseAction.checkSessionTimeOut(BaseAction.java:930) at com.krm.slsint.common.web.action.BaseAction.execute(BaseAction.java:194) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:421) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:226) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.krm.slsint.common.web.filter.RequestFilter.doFilter(RequestFilter.java:84) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:75) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:228) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:216) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:634) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:445) at java.lang.Thread.run(Thread.java:619)

引發的緣由:

String hql = "FROM ContrastRelation dict WHERE dict.dicid='"+dicid+"' and dict.parentid='"+parentid+"'" ;//問題在這裏
ContrastRelation cr = new ContrastRelation();
cr = (ContrastRelation)this.getHibernateTemplate().find(hql, new String[]{dicid, parentid}).get(0);
return cr;

改成：佔位符的hql語句而不是拼湊的！
String hql = "FROM ContrastRelation dict WHERE dict.dicid=? and dict.parentid=?" ;//修改後的