/SQL/A good way of running a SQL query in JDBC using a parameterized statement

A good way of running a SQL query in JDBC using a parameterized statement

// Connect to the database.
Connection conn = DriverManager.getConnection(URL, USER, PASS);

// Construct the SQL statement we want to run, specifying the parameter.
String sql = "SELECT * FROM users WHERE email = ?";

// Generate a prepared statement with the placeholder parameter.
PreparedStatement stmt = conn.prepareStatement(sql);

// Bind email value into the statement at parameter index 1.
stmt.setString(1, email);

// Run the query...
ResultSet results = stmt.executeQuery(sql);

while (results.next())
{
    // ...do something with the data returned.
}

Source: hacksplaining.com

Similar codes

0 vote347 views1 answer
Mysql insert into select with recursive
SQL
0 vote337 views1 answer
Procedures sql insert mysql
SQL
0 vote448 views1 answer
Delet all record statment sql
SQL
3 votes370 views1 answer
Postgresql if null then 0
SQL
0 vote337 views1 answer
What is the use of index in mysql table
SQL
0 vote380 views1 answer
How to pass list as parameter in SQL query
SQL
0 vote407 views1 answer
Postgresql alter table sequence
SQL
0 vote338 views1 answer
SqlFunction does not exist
SQL
2 votes366 views2 answers
Get all tables using like
SQL
0 vote344 views1 answer
Postgresql remove new line from string
SQL