JDBC的多条件动态查询

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;


public class JavaBeanTest {
private String foodName;
private String represent;
private String price;
private String place;



public String getFoodName()
{
return foodName;
}
public void setFoodName(String foodName)
{
this.foodName = foodName;
}
public String getRepresent()
{
return represent;
}
public void setRepresent(String represent)
{
this.represent = represent;
}

public String getPrice()
{
return price;
}
public void setPrice(String price)
{
this.price = price;
}
public String getPlace()
{
return place;
}
public void setPlace(String place)
{
this.place = place;
}






    public static ArrayList<JavaBeanTest> searchFood(String[] keys,String[] values) throws SQLException
{
ArrayList<JavaBeanTest> list = new ArrayList<JavaBeanTest>();
Connection conn = null;
PreparedStatement pstmt = null;
ResultSet rs = null;
StringBuffer sql = new StringBuffer();
sql.append("select * from food ") ;
try
{
Class.forName("com.mysql.jdbc.Driver");
conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/database",
"root","0000");
if (keys.length == 0)
{

}else {
for (int i = 0; i < keys.length; i++)
{
if (i == 0)
{
sql.append( "where " + keys[i] + " = '" + values[i] + "'\n");
}else {
sql.append( "and " + keys[i] + " = '" + values[i] + "'\n");
}
}
}

pstmt = conn.prepareStatement(sql.toString());
rs = pstmt.executeQuery();
while (rs.next())
{
JavaBeanTest jbt = new JavaBeanTest();
jbt.setFoodName(rs.getString(2));
jbt.setPlace(rs.getString(6));
jbt.setPrice(rs.getString(5));
jbt.setRepresent(rs.getString(3));
list.add(jbt);
}
} catch (ClassNotFoundException e)
{
// TODO Auto-generated catch block
e.printStackTrace();
} catch (SQLException e)
{
// TODO Auto-generated catch block
e.printStackTrace();
}finally
{
if (rs != null)
{
rs.close();
}
if (pstmt != null)
{
pstmt.close();
}
if (conn != null)
{
conn.close();
}
}
return list;
} 
    

}