JDBC动态拼接sql语句

public class Demo1 {
        private static String url = "jdbc:mysql://127.0.0.1:33056/test";
        private static String username = "root";
        private static String password = "123456";
        private static String phone = "10086";
        private static String height = "185";

    public static void main(String[] args) {
            //注册驱动
            Connection connection = null;
            PreparedStatement pst = null;
            try {
                //注册驱动
                Class.forName("com.mysql.jdbc.Driver");
                //获取连接
                connection = DriverManager.getConnection(url, username, password);
                //创建sql语句
                StringBuffer sbf = new StringBuffer();
                sbf.append("select name,age,address from user where 1=1");
                //动态拼接sql语句
                if(StringUtils.isNotBlank(phone)){
                    sbf.append("and phone = ?");
                }
                if(StringUtils.isNotBlank(height)){
                    sbf.append("and height = ?");
                }
                //获取PreparedStatement
                pst = connection.prepareStatement(sbf.toString());
                //设置参数
                if(StringUtils.isNotBlank(phone)){
                    pst.setString(1,phone);
                }
                if(StringUtils.isNotBlank(height)){
                    pst.setString(2,phone);
                }
                //执行sql语句
                ResultSet resultSet = pst.executeQuery();
                //遍历结果集
                while(resultSet.next()){
                    String name = resultSet.getString(1);
                    int age = resultSet.getInt(2);
                    String address = resultSet.getString(3);
                }
            } catch (Exception e) {
                e.printStackTrace();
            }finally {
                if(connection != null){
                    try {
                        connection.close();
                    } catch (SQLException e) {
                        e.printStackTrace();
                    }
                }

                if(pst != null){
                    try {
                        pst.close();
                    } catch (SQLException e) {
                        e.printStackTrace();
                    }
                }
            }
        }


}