stmt.executeQuery("select * from user where username = " + name);
stmt.executeQuery("select * from user where username = '" + name + "'");