prepareStatement使用「建议收藏」

<span style="white-space:pre">	</span>public boolean login2(String username, String password) throws Exception{
		String url = "jdbc:mysql://localhost:3306/mydb1";
		Class.forName("com.mysql.jdbc.Driver");
		String sqlUsername = "root";
		String sqlPassword = "123";
		
		Connection con = DriverManager.getConnection(url, sqlUsername, sqlPassword);
		
		//preparedStatement
		String sql = "select * from user where username=? and password=?";

		PreparedStatement pst = con.prepareStatement(sql);
		
		//给参数赋值
		pst.setString(1, username); //第一个问号赋值
		pst.setString(2, password); //第一个问号赋值
		
		ResultSet rs = pst.executeQuery();
		return rs.next();
	}