/SQL/A good way of running a SQL query in JDBC using a parameterized statement

A good way of running a SQL query in JDBC using a parameterized statement

// Connect to the database.
Connection conn = DriverManager.getConnection(URL, USER, PASS);

// Construct the SQL statement we want to run, specifying the parameter.
String sql = "SELECT * FROM users WHERE email = ?";

// Generate a prepared statement with the placeholder parameter.
PreparedStatement stmt = conn.prepareStatement(sql);

// Bind email value into the statement at parameter index 1.
stmt.setString(1, email);

// Run the query...
ResultSet results = stmt.executeQuery(sql);

while (results.next())
{
    // ...do something with the data returned.
}

Source: hacksplaining.com

Similar codes

17 votes114 views3 answers
How to change a collumn name in sql
SQL
2 votes104 views1 answer
Possgress drop if exists table
SQL
3 votes101 views2 answers
Postgres inner join vs join
SQL
1 vote91 views2 answers
DROP TABLes regardless of constraints
SQL
3 votes109 views2 answers
Sqlite print all column names
SQL
0 vote115 views1 answer
Sqlite3 pragma foreign keys
SQL
1 vote110 views1 answer
Age postgres
SQL
5 votes102 views2 answers
Get columns number sql
SQL
1 vote102 views1 answer
Sql bitwise operators
SQL
0 vote108 views1 answer
Postgresql select fast check no rows
SQL