Prepared Statements

Code Fragment 1:

Statement stmt = con.createStatement();
String updateString = “UPDATE COFFEES SET SALES = 75 ” +
“WHERE COF_NAME LIKE ‘Colombian’”;
stmt.executeUpdate(updateString);

Code Fragment 2:

PreparedStatement updateSales = con.prepareStatement(
“UPDATE COFFEES SET SALES = ? WHERE COF_NAME LIKE ? “);
updateSales.setInt(1, 75);
updateSales.setString(2, “Colombian”);
updateSales.executeUpdate():