Creating a Parameterized SQL Query Using PreparementStatement
// conn – having a database connection alreadyPreparedStatement stmnt = null;ResultSet rs = null;try{ // ‘?’ indicates placement of a parameter. stmnt = conn.prepareStatement(“SELECT firstName FROMemployees WHERE salary > ?”);