Executing SQL Statements

• If your statement has variable parts, use a PreparedStatement

  String query = "SELECT * WHERE Account_Number = ?";
  PreparedStatement stat = conn.prepareStatement(query);

• The ? symbols denote variables that you fill in when you make an actual query
• Call a set method to fill this variables

  stat.setString(1, accountNumber);

• The first parameter the set methods denotes the variable position (1 is the first ?)
• There are also methods setInt and setDouble
• After setting all variables, call executeQuery or executeUpdate