package book.database;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.SQLException;

/**
 * 使用PreparedStatement傳遞變量
 */
public class UsingPreparedStatement {

	public static void main(String[] args) throws ClassNotFoundException,
			SQLException {
		String dbName = "studentdb";
		String userName = "test";
		String password = "test";
		// SQL中有多個問號，表示這些地方的值還不確定
		String sql = "INSERT INTO student_basic (name, age, score) VALUES (?,?,?)";
		Connection con = null;
		PreparedStatement psm = null;
		try {
			// 獲得數據庫連接
			con = DBConnector.getMySQLConnection(null, null, null, dbName,
					userName, password);
			psm = con.prepareStatement(sql);
			
			// 將SQL語句中的？賦值
			psm.setString(1, "wangwu");
			psm.setInt(2, 17);
			psm.setDouble(3, 98);
			psm.executeUpdate();
		} catch (ClassNotFoundException e1) {
			throw e1;
		} catch (SQLException e2) {
			throw e2;
		} finally {
			OperateDB.closeStatement(psm);
			// 關閉數據庫連接
			OperateDB.closeConnection(con);
		}
	}
}