PreparedStatement的用法

在写精确查找的时候，sql语句用错了，然后查了查PreparedStatement的用法

具体的用法可以参考博文：https://www.cnblogs.com/onmyway20xx/p/4273321.html

String sql= "select * from system where name =?";
Connection conn=Database.getConnection(); 
 3 PreparedStatement pstmt = null;
ResultSet rs = null;
 try {
    pstmt = conn.prepareStatement(sql);
    pstmt.setString(1, name);
    rs = pstmt.executeQuery();
    while(rs.next()) {
           String Name=rs.getString("name");
    }
}