java mysql 预处理指令_mysql在java中的俩种写法预处理对象preparedStatement与statement语句对象...

public class ServletJDBC extends HttpServlet{ String url = "jdbc:mysql://localhost:3306/test"; String user = "root"; String password = "123456"; Connection conn = null; String adduser = "INSERT INTO login(username,userpassword) VALUES(?,?)"; String select = "SELECT * FROM login"; PreparedStatement pstmt = null; ResultSet rs = null; Statement st = null; @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { resp.setContentType("text/html"); resp.setCharacterEncoding("gb2312"); PrintWriter out = resp.getWriter(); try { Class.forName("com.mysql.jdbc.Driver"); conn = DriverManager.getConnection(url,user,password); } catch (ClassNotFoundException e) { out.println("加载数据库驱动失败"); e.printStackTrace(); } catch (SQLException e) { out.println("链接数据库失败"); e.printStackTrace(); } //预处理对象插入 try { pstmt = conn.prepareStatement(adduser); pstmt.setString(1,"username11"); pstmt.setString(2, "chun11"); pstmt.executeUpdate(); //statement语句对象查询 st = conn.createStatement(); rs = st.executeQuery(select); while(rs.next()) { out.println("userid:" + rs.getString(1)); out.println("usrepassword:" + rs.getString(2)); } } catch (SQLException e) { out.println("预处理失败"); e.printStackTrace(); } } }