JDBC PreparedStatement Demo

Master Java Database Connectivity!

Subscribe to Ram N Java for practical code walkthroughs, JDBC best practices, and beginner-friendly Java tutorials!

SUBSCRIBE NOW

What is a PreparedStatement in JDBC?

The PreparedStatement interface extends Statement and represents a precompiled SQL statement. Instead of constructing SQL strings by concatenating values directly, PreparedStatement uses placeholders (?) for parameterized queries.

Because the database compiles the query structure once and reuses the execution plan with different parameters, it offers superior performance for repeated queries and provides strong defense against SQL injection attacks.

Complete Java Code Implementation

Here is a practical example demonstrating how to insert records using PreparedStatement:

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.SQLException;

public class PreparedStatementDemo {
    public static void main(String[] args) {
        String url = "jdbc:mysql://localhost:3306/testdb";
        String user = "root";
        String password = "password";

        String insertQuery = "INSERT INTO employees (id, name, department, salary) VALUES (?, ?, ?, ?)";

        try (Connection conn = DriverManager.getConnection(url, user, password);
             PreparedStatement pstmt = conn.prepareStatement(insertQuery)) {

            // Setting parameter values
            pstmt.setInt(1, 101);
            pstmt.setString(2, "Alice Smith");
            pstmt.setString(3, "Engineering");
            pstmt.setDouble(4, 85000.00);

            int rowsInserted = pstmt.executeUpdate();
            System.out.println("Rows successfully inserted: " + rowsInserted);

        } catch (SQLException e) {
            e.printStackTrace();
        }
    }
}

Key Advantages of PreparedStatement

• SQL Injection Prevention: Values set via setter methods are automatically sanitized, neutralizing malicious SQL input.
• Better Performance: Precompiled queries can be executed multiple times with varying parameter inputs without recompilation overhead.
• Cleaner Code: Eliminates cumbersome quotation mark concatenation and string formatting when assembling complex SQL commands.

Watch More Related JDBC Tutorials

• JDBC Architecture Explained: How Java Connects to Any Database
• JDBC Driver Overview: Everything You Need to Know
• JDBC Driver Types Explained: Which One to Use?

---

Click here to watch in Youtube : https://www.youtube.com/watch?v=g0EauGjVY58

Click the below Image to Enlarge

JDBCPreparedStatementDemo Project Dir Structure