How Can I Retrieve SQL Statement From The User ?

Question

Hi
I want to know, how can I make the user can enter the SQL statement from himself ?? in this code he can't enter it. Only he can display the SQL that i wrote it...
this is my Code:
import java.sql.*;
public class db_testing {
     static final String DRIVER = "com.mysql.jdbc.Driver";            
     static final String DATABASE_URL = "jdbc:mysql://localhost/S204111933";
     public static void main(String[] args) {
          Connection cn=null;
          Statement st= null;
          ResultSet rset=null;
          try{
               Class.forName(DRIVER);
               cn=DriverManager.getConnection(DATABASE_URL, "root", "admin");
               st=cn.createStatement();
               rset=st.executeQuery("select * from employee");
               ResultSetMetaData metadata=rset.getMetaData();
               System.out.println("The begining: ");
               for(int i=1;i<=metadata.getColumnCount();i++)
               System.out.print(metadata.getColumnName(i)+"\t");
               System.out.println();
               System.out.println();
               while(rset.next()){
               for(int i=1;i<=metadata.getColumnCount();i++)
               System.out.print(rset.getObject(i)+"\t\t");
               System.out.println();}
          catch(Exception e){
               e.printStackTrace();
          finally{
               try{
               cn.close();
               st.close();
               rset.close();
               catch(Exception e1){
                    e1.printStackTrace();
}

Answer 1

The following changes in the code will make the user to give the input
import java.sql.*;
public class db_testing {
static final String DRIVER = "com.mysql.jdbc.Driver";
static final String DATABASE_URL = "jdbc:mysql://localhost/S204111933";
public static void main(String[] args) {
Connection cn=null;
Statement st= null;
ResultSet rset=null;
try{
Class.forName(DRIVER);
cn=DriverManager.getConnection(DATABASE_URL, "root", "admin");
// st=cn.createStatement();
// rset=st.executeQuery("select * from employee");
PreparedStatement pstmt=null;
pstmt=cn.prepareStatement("select * from employee where id=?");
pstmt.setInt(1,Integer.parseInt(args[0]));
rset=pstmt.executeQuery();
ResultSetMetaData metadata=rset.getMetaData();
System.out.println("The begining: ");
for(int i=1;i<=metadata.getColumnCount();i++)
System.out.print(metadata.getColumnName(i)+"\t");
System.out.println();
System.out.println();
while(rset.next()){
for(int i=1;i<=metadata.getColumnCount();i++)
System.out.print(rset.getObject(i)+"\t\t");
System.out.println();}
catch(Exception e){
e.printStackTrace();
finally{
try{
cn.close();
st.close();
rset.close();
catch(Exception e1){
e1.printStackTrace();
}