PreparedStatement的用法

利用PreparedStatement实现一个用户登录的例子（所用的表是自己建立的银行用户表）
Class.forName("oracle.jdbc.driver.OracleDriver");
	      Connection conn=DriverManager.getConnection("jdbc:oracle:thin:@localhost:1521:orcl", "scott", "tiger");
	      //Statement stmt=conn.createStatement();
	      Scanner scan=new Scanner(System.in);
	      System.out.print("请输入卡号：");
	      String cardID=scan.next();
	      System.out.print("请输入密码：");
	      String pwd=scan.next();
	      String sql="select * from users where cardID=? and cardpwd=?";
	      PreparedStatement psmt=conn.prepareStatement(sql);
	      psmt.setString(1, cardID);
	      psmt.setString(2, pwd);
	      ResultSet rs=psmt.executeQuery();
	      if(rs.next())
			{
				System.out.println("登录成功！");
			}
			else
			{
				System.out.println("登录失败，用户名或密码错误！");
			}