/SQL/A good way of running a SQL query in JDBC using a parameterized statement

A good way of running a SQL query in JDBC using a parameterized statement

// Connect to the database.
Connection conn = DriverManager.getConnection(URL, USER, PASS);

// Construct the SQL statement we want to run, specifying the parameter.
String sql = "SELECT * FROM users WHERE email = ?";

// Generate a prepared statement with the placeholder parameter.
PreparedStatement stmt = conn.prepareStatement(sql);

// Bind email value into the statement at parameter index 1.
stmt.setString(1, email);

// Run the query...
ResultSet results = stmt.executeQuery(sql);

while (results.next())
{
    // ...do something with the data returned.
}

Source: hacksplaining.com

Similar codes

0 vote258 views1 answer
Mysql date only no time
SQL
0 vote253 views2 answers
Find Overlapping sql
SQL
0 vote329 views1 answer
Oracle convert int to date
SQL
1 vote257 views1 answer
Increase date by one day in sql oracle
SQL
3 votes278 views1 answer
Postgres kill running query
SQL
2 votes276 views3 answers
Sql function
SQL
1 vote276 views3 answers
Date_add mysql
SQL
0 vote247 views1 answer
Time in sql server
SQL
0 vote255 views1 answer
Search db for table name
SQL
52 votes453 views6 answers
Rename column sql
SQL