JDBC PreparedStatement & Statement

First, the preface

PreparedStatement is one of the APIs used to execute SQL query statements

Java provides Statement, PreparedStatement, and CallableStatement three ways to execute query statements

which

Statement for common queries

PreparedStatement used to perform parameterized queries

CallableStatement is used for stored procedures.

PreparedStatement is also often mentioned in the Java interview, such as the difference between statement and PreparedStatement and how to avoid SQL injection attacks. In this tutorial we will discuss why we should use PreparedStatement. What are the advantages of using PreparedStatement? PreparedStatement is also how to avoid SQL injection attacks.

second, what is PreparedStatement.

PreparedStatement is an interface under the JAVA.SQL package that executes SQL statement queries and can obtain Preparedstatment objects by invoking the Connection.preparedstatement (SQL) method.

The database system compiles the SQL statements (if the JDBC driver supports them), the preprocessing statements are precompiled, and the precompiled SQL query statement can be reused in future queries, so that it is faster than the query generated by the statement object.

Here is an example:

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

public class Preparedstmtexample {public static void main (String args[]) throws SQLException {