/SQL/A good way of running a SQL query in JDBC using a parameterized statement

A good way of running a SQL query in JDBC using a parameterized statement

// Connect to the database.
Connection conn = DriverManager.getConnection(URL, USER, PASS);

// Construct the SQL statement we want to run, specifying the parameter.
String sql = "SELECT * FROM users WHERE email = ?";

// Generate a prepared statement with the placeholder parameter.
PreparedStatement stmt = conn.prepareStatement(sql);

// Bind email value into the statement at parameter index 1.
stmt.setString(1, email);

// Run the query...
ResultSet results = stmt.executeQuery(sql);

while (results.next())
{
    // ...do something with the data returned.
}

Source: hacksplaining.com

Similar codes

4 votes210 views1 answer
Data types in sql
SQL
0 vote208 views1 answer
Postgres select from values
SQL
3 votes206 views2 answers
Host '' is not allowed to connect to this MySQL server
SQL
31 votes198 views3 answers
Sql count
SQL
0 vote220 views1 answer
Object of class mysqli_result could not be converted to string
SQL
-1 vote198 views2 answers
Sql convert date to string yyyy-mm-dd
SQL
0 vote157 views1 answer
Msg 241, level 16, state 1, line 1 conversion failed when converting date and/or time from character string.
SQL
1 vote192 views1 answer
How to check the mysql version mac
SQL
0 vote196 views1 answer
Mod in sql
SQL
0 vote222 views1 answer
Less than date query sqlachemy
SQL