mysql在java中的俩种写法预处理对象preparedStatement与statement语句对象

mysql在java中的俩种写法预处理对象preparedStatement与statement语句对象

public class ServletJDBC extends HttpServlet{
String url = "jdbc:mysql://localhost:3306/test";
String user = "root";
String password = "123456";
Connection conn = null;
String adduser = "INSERT INTO login(username,userpassword) VALUES(?,?)";
String select = "SELECT * FROM login";
PreparedStatement pstmt = null;
ResultSet rs = null;
Statement st = null;

@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp)
throws ServletException, IOException {
resp.setContentType("text/html");
resp.setCharacterEncoding("gb2312");
PrintWriter out = resp.getWriter();
try {
Class.forName("com.mysql.jdbc.Driver");
conn = DriverManager.getConnection(url,user,password);
} catch (ClassNotFoundException e) {
out.println("加载数据库驱动失败");
e.printStackTrace();
} catch (SQLException e) {
out.println("链接数据库失败");
e.printStackTrace();
}
//预处理对象插入
try {
pstmt = conn.prepareStatement(adduser);
pstmt.setString(1,"username11");
pstmt.setString(2, "chun11");
pstmt.executeUpdate();
//statement语句对象查询
st = conn.createStatement();
rs = st.executeQuery(select);

while(rs.next())
{
out.println("userid:" + rs.getString(1));
out.println("usrepassword:" + rs.getString(2));
}
} catch (SQLException e) {
out.println("预处理失败");
e.printStackTrace();
}
}

}