Is any way to set up a preparestatement in this situation?

Question

Here are two related tables:
friends (
id varchar(20),
myfriends []varchar(20)
account (
id varchar(20),
name varchar(20)
I need to find out someone's friends' names, if there is any.
Two SQL statements are needed to achieve the result. In order to put both in one single try-catch block, the two statements are as the follows:
String str1="select myfriends from friends where id='" + id + "'";
String str2="select name from account where id = ?";
The problem is the the result of the first statement can vary from empty (easy to handle) to any number. The second statement only deals with one id. Is any way that I can use the format of the second statement to handle with multiple ids? Or I have to use two try-catch block instead?
Thanks for your suggestions.
V.

Answer 1

String str1="select myfriends from friends where id='"
+ id + "'";
String str2="select name from account where id = ?";Not sure I nailed what you are asking, but you might try creating an inlist that dyanmically would look like this:
String str2="select name from account where id in('aa','bb','cc')";