PerparedStatement 的SQL语句

增

String sql="insert into student values(" + number + ",'" + name + "'," + lass

     + ",'" + sex + "','" + profession + "','" + academism + "')";

   Statement stmt=MySqlDAO.getStatement();

"insert into student (id,name,class,sex,professional,college)"

    + "value(?,?,?,?,?,?)"

删

String sql = "delete from student where number=" + number + "";

改

String sql = "update student set name='" + name + "' where number="

     + number;

查

String sql = "select * from student where number=" + number + "";

   ResultSet rs = stmt.executeQuery(sql);