Hackforge Academy

Explanation

PreparedStatement is used to execute
parameterized queries.

Code:

PreparedStatement ps = con.prepareStatement(
"INSERT INTO users(name,email) VALUES(?,?)");

Explanation

Set parameters using setter methods.

Code:

ps.setString(1,"John");
ps.setString(2,"john@mail.com");

Explanation

Execute insert or update queries using
executeUpdate().

Code:

ps.executeUpdate();

Explanation

Execute select queries using executeQuery().

Code:

ResultSet rs = ps.executeQuery();

Explanation

PreparedStatement helps prevent SQL Injection.

Code:

PreparedStatement ps = con.prepareStatement(
"SELECT * FROM users WHERE email=?");