preparedStatement 与 statement区别

prepareStatement可以替换变量在SQL语句中可以包含?，可以用ps=conn.prepareStatement("select * from Cust where ID=?");int sid=1001;ps.setInt(1, sid);rs = ps.executeQuery();可以把?替换成变量。而Statement只能用int sid=1001;Statement stmt = conn.createStatement();ResultSet rs = stmt.executeQuery("select * from Cust where ID="+sid);来实现