SQL for Java Devs · interview question
When combining tables using a JOIN, which JDBC method allows you to safely insert parameter values into your SQL query?
Multiple choiceEasychapter-8-curatedpremiumsql-for-java-devsjoins
String sql = "SELECT * FROM customers WHERE name = ?";
PreparedStatement pstmt = connection.prepareStatement(sql);
pstmt.setString(1, "John");Answer and explanation
Correct answer
D. PreparedStatement.setString()
Why
PreparedStatement.setString() is used to bind parameters to placeholders in your SQL query, ensuring safer execution by preventing SQL injection attacks.
Test yourself on SQL for Java Devs
A free test with instant, explained results. No account needed.
More SQL for Java Devs questions
- How can JDBC transactions help maintain data integrity during an e-commerce checkout process?
- What would be the effect of not closing a PreparedStatement in a Java application?
- In JDBC, how do you ensure that SQL injection is prevented when executing a query that searches for a user by email?
- Why do teams use SQL JOINs to fetch relational data in a single query in production code?
- What should a repository method mainly encapsulate?
- How can you prevent the N+1 query problem when retrieving a list of orders with their customer details?