19.6. Executing SQL Statements

Try these first

1. 1.

   What is the purpose of the Statement interface?

   Hint

   Think about the types of queries it handles.

2. 2.

   How does PreparedStatement protect against SQL injection?

   Hint

   Consider how inputs are treated.

3. 3.

   What interface should be used for executing static SQL statements?

   • PreparedStatement
   • Statement
   • CallableStatement

   Hint

   Think about which interface directly runs simple queries.

4. 4.

   True or False: CallableStatement is used for executing simple SQL statements.

   • True
   • False

   Hint

   Reflect on the type of operations that this interface handles.

5. 5.

   Write a function that accepts a student's ID and name, and uses PreparedStatement to update the student's name in the database.

   Hint

   Think about how you need to set parameters for your query.

6. 6.

   Design a stored procedure that increases a student's score by a specified amount and call it using CallableStatement.

   Hint

   Consider how you would need to pass parameters to the stored procedure.