19.8.1. Update Example

PreparedStatement pstmt = con.prepareStatement("UPDATE students SET name=? WHERE id=?");

In this chunk, we create a PreparedStatement object using the connection object 'con'. The SQL command specifies that we want to update the name of a student in the 'students' table, where the student's ID matches a specific value. The '?' placeholders in the query indicate where we will insert variable values later, ensuring that our query can be adapted for different inputs without risking SQL injection.

Think of this like writing a letter but leaving a blank space for the recipient's name and address. Each time you send a letter, you complete those blanks with different information, but the format of the letter remains the same.

pstmt.setString(1, "Rahul"); pstmt.setInt(2, 101);

Here, we are binding values to the placeholders defined in the SQL statement. The first parameter (index 1) is assigned the string 'Rahul', which represents the new name for the student. The second parameter (index 2) is an integer value of 101, which represents the ID of the student whose name we want to update. This prevents SQL injection as the parameters are treated as values and not as executable code.

It's similar to filling in a form: you have different fields such as name and age. You fill out these fields with your specific information without changing the structure of the form.

pstmt.executeUpdate();

This line of code executes the prepared SQL update statement. The executeUpdate() method is used for executing statements that change data in the database, such as INSERT, UPDATE, or DELETE commands, and it returns the number of rows affected by the operation. In our case, it will return the number of student records that have been updated.

Imagine you are a librarian who wants to change the title of a book. When you find the book and make the change, you would count how many books you've changed. Similarly, the executeUpdate() method counts how many student records were changed in the database.

--