JDBC 4 ORACLE

public boolean yanzheng(String unam,String pwd)
{

boolean flag=false;
try {
Connection con;
Class.forName("oracle.jdbc.driver.OracleDriver");
con = DriverManager.getConnection(
"jdbc:oracle:thin:@127.0.0.1:1521:ceo", "scott", "tiger");
Statement st = con.createStatement();
String sql = "";
sql = "select tbl_pwd from lgn_tbl where tbl_name='" + unam + "'";
ResultSet rs = st.executeQuery(sql);
String pw=null;
if (rs.next()) {
pw = rs.getString(1);
}
if (rs != null)
rs.close();
if (st != null)
st.close();
if (con != null)
con.close();
if ( pwd.equals(pw)) {
flag= true;
}

} catch (Exception e) {
e.printStackTrace();
}
return flag;
}


getStatement().executeQuery(sql)