Using a variable for a query? Advice needed

Question

Hello everyone,
I am new to JDBC and have a small problem with my application:
I want the user to enter a word and depending on the word he enters, the program will run a query searching for that word.
For example the user input is stored in a variable called "input", which is converted to a String.
How can I modify the following command so that it actually uses the "value" as a variable?
s.execute("select * from Users WHERE Name=input");
Thank you very much for your help!

Answer 1

"value" as a variable?
s.execute("select * from Users WHERE Name=input");
Thank you very much for your help!Use PreparedStatement, something like this:
public User find(String name) throws SQLException
    User user = null;
    // Name might be a very poor choice for a column name.  Make sure it's not a keyword
    String sql = "SELECT * FROM Users Where Name = ?";
    PreparedStatement stmt = null;
    ResultSet rs = null;
    try
        stmt = connection.prepareStatement(sql);
        stmt.setString(1, name);
        rs = stmt.executeQuery();
        while (rs.next())
            // load rs into User
    finally
        close(rs);  // you'll need to write these static methods
        close(stmt);
    return user;
}%