/SQL/A good way of running a SQL query in JDBC using a parameterized statement

A good way of running a SQL query in JDBC using a parameterized statement

// Connect to the database.
Connection conn = DriverManager.getConnection(URL, USER, PASS);

// Construct the SQL statement we want to run, specifying the parameter.
String sql = "SELECT * FROM users WHERE email = ?";

// Generate a prepared statement with the placeholder parameter.
PreparedStatement stmt = conn.prepareStatement(sql);

// Bind email value into the statement at parameter index 1.
stmt.setString(1, email);

// Run the query...
ResultSet results = stmt.executeQuery(sql);

while (results.next())
{
    // ...do something with the data returned.
}

Source: hacksplaining.com

Similar codes

0 vote127 views1 answer
Mysql select all where count more than"
SQL
6 votes148 views2 answers
Mysql timestamp to date
SQL
0 vote122 views1 answer
INSERT INTO table using OpenQuery
SQL
0 vote133 views2 answers
How to use aggregate functions in sql
SQL
0 vote136 views1 answer
Sql list dates between two dates
SQL
0 vote123 views1 answer
Syntax for changing column size in mysql
SQL
34 votes166 views6 answers
Alter table add foreign key mysql
SQL
3 votes145 views1 answer
Oracle apex message quit website
SQL
1 vote133 views1 answer
OstgreSQL version
SQL
0 vote128 views1 answer
Can we rollback in sql
SQL