#preparedstatement sql injection

Comparing Statement vs PreparedStatement in java

Statement vs PreparedStatement

  PreparedStatement is a subclass of Statement.   Similar to Statements, we can use a PreparedStatement to run SQL statements against database.   Here are the differences between them :  

Efficiency

  When a statement is executed, the JDBC driver compiles the SQL statement before sending it to database.   If we have multiple similar statements, the same process of…