http://publib.boulder.ibm.com/infoce...plespjava1.htm
This is a very simple example of a parameterized SQL in Java program ..
Get an example of a program which the Developers claim to be using parameterised SQL ...
and check for keywords like setString (or any of the setxxx type constructs detailed in table 57 in
http://publib.boulder.ibm.com/infoce...d/rjvjdapi.htm)
The general constuct of the program will be as follows :
a) Assign a statement text with a parameter marker to a string variable
b) Prepare the sql statement using the above string variable and assign it to a statement object
c) Use setString,setInt etc on the statement object and set the parameter values of the SQL
d) Execute the statement object using executeQuery (select stmts) or executeUpdate (IUD stmts)
e) Repeat c and d as many times as needed [ because the sql statement is already prepared ]
HTH
Sathyaram