Hesitate with Statement and PreparedStatement!!!!!!

Question

i create a test to make clear the 2 thing's diffrience,
Test use tomcat4.1.24+mysql,test times more than 15 per test
situation:
1:create a Connection to mysql,create a Statement object, use this Statement object to query a sql,use time for 411ms;
2:create a Connection to mysql,create a PreparedStatement object, use this PreparedStatement object to query a sql with a parameter,use time for 409ms;
3:create a Connection and a Statement to mysql in the construction method,in the method to query a sql use the current Statement,use time 380 ms;
4:create a Connection and a PreparedStatement to mysql in the construction method,in the method to query a sql use the current PreparedStatement ,use time 390 ms;
5:jstl:<sql:setDataSource/>set the scope with the four parameter in (request,page,session,application),use time is all about 411ms;
so i wanna anybody tell me ,what is the advantage of PreparedStatement.

Answer 1

A PreparedStatement means you don't have to do anything special if you try to insert a string that contains a quote character. And you don't have to tie your code in knots trying to get your timestamps formatted in just the way your database insists on. The PreparedStatement handles all those issues for you. The Statement doesn't.
A more realistic benchmark comparison would be:
1. Create a Connection, create a PreparedStatement, use it as a query 1000 times.
2. Create a Connection, then 1000 times create a Statement and use it as a query.
PC&#178;