Java Tutorial 88 - JDBC 5/7 PreparedStatement

In this tutorial, I will show you how to use PreparedStatement. A PreparedStatement interface enables you to create parameterized SQL statements. The PreparedStatement interface is used to execute a precompiled SQL statement with or without parameters. It is efficient for repeated executions.

For example, the INSERT statement has five question marks as placeholders for parameters representing values for no, name, age, gender, and address in a record of the employee table.

sqlText = "INSERT INTO employee (no, name, age, gender, address) "
+ "VALUES (?, ?, ?, ?, ?)"; // insert a parameter with ?
PreparedStatement preparedStatement = connection.prepareStatement(sqlText);

In general, the setter methods are used to set the values for the parameters before executing statements.

setX(int parameterIndex, X value);

where X is the type of the parameter (e.g. String), and parameterIndex is the index of the parameter in the statement (e.g. 1 for the first index).

preparedStmt.setString(1, "E00004");
preparedStmt.setString(2, "Jenny");
preparedStmt.setInt(3, 26);
preparedStmt.setString(4, "F");
preparedStmt.setString(5, "NY");

After setting the parameters, you can execute the prepared statement by invoking executeQuery for a SELECT statement, or executeUpdate for a DROP, CREATE, SELECT, UPDATE or DELETE statement.

preparedStmt.executeUpdate();

preparedStmt.executeQuery();