PreparedStatement objects and statement objects in MySQL

PreparedStatement object Compared to statement object1, the readability and maintainability of the code.2, PreparedStatement can guarantee security (solve SQL injection problem)3, PreparedStatement can improve the performance of the maximum possible:Demo

1 //SQL statements, parameters with? Instead of-----must be in English? 2String sql= "INSERT into S_user (Name,password) VALUES (?,?)";3         Try {4pstmt=connection.preparestatement (SQL);5Pstmt.setstring (1, "small yellow yellow");//Set parameter value, index starting from 16Pstmt.setstring (2, "1234567890");7             intresult=pstmt.executeupdate ();8}

PreparedStatement objects and statement objects in MySQL