PreparedStatement

package jdbc;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;

/**
 * 表示预编译的SQL语句对象
 * @author Administrator
 *
 */
public class PreparedStatementTest {

	/**
	 * @param args
	 */
	public static void main(String[] args) {

		Connection conn = null;
		PreparedStatement ps = null;
		ResultSet rs = null;

		//插入语句
		String sql1="INSERT INTO score(sno,sname,score) values(?,?,?)";

		//查询语句
		String sql2="SELECT sno,sname,score FROM score WHERE sno LIKE ?";


		try {
			conn = JDBCUtil.getConnection();
			//先发送带参数的sql语句，
			ps = conn.prepareStatement(sql1);

			//再发送一组参数值
			ps.setString(1, "200600808");
			ps.setString(2, "吴雨");
			ps.setDouble(3, 88);

			//执行更新数据
			int result =ps.executeUpdate();
			System.out.println("更新:"+result+" 条数据！");


			ps=conn.prepareStatement(sql2);
			ps.setString(1, "20060%");
			//执行查询操作
			rs = ps.executeQuery();
			while(rs.next()){
				System.out.println("学号:"+rs.getString("sno"));
				System.out.println("姓名:"+rs.getString("sname"));
				System.out.println("分数:"+rs.getDouble("score"));
				System.out.println("----------------------------");
			}

			} catch (SQLException e) {
			e.printStackTrace();
		}
			JDBCUtil.close(rs, ps, conn);
	}

}