jdbc pre-compiled implementation

jdbc precompiled There are two ways:

A way, pre-compiled jdbc themselves to achieve, it is to do some special characters to deal with anti-SQL injection, see PreparedStatement source code on it.

public static void main(String[] args) {

    try {

        final String driverClassName = "com.mysql.jdbc.Driver";
        final String url = "jdbc:mysql://10.6.9.14:3306/SBLOG";  重点看这里
        final String username = "sdl";
        final String password = "sdl";

        Connection connection = DriverManager.getConnection(url2, username, password);

        String sql = " SELECT *\n" +
                "   FROM t_web\n" +
                "  WHERE id = ? and name like ?";

        Class.forName(driverClassName);

        PreparedStatement preparedStatement = connection.prepareStatement(sql);

        preparedStatement.setInt(1, 1);

        preparedStatement.setString(2, "%ing%");


        RST = PreparedStatement.executeQuery the ResultSet (); 

        rst.next (); 

        System.out.println (rst.getString (2)); 
    } the catch (Exception E) { 
        e.printStackTrace (); 
    } 

} 

When there is a call MySQL wireshark screenshot. Stitching complete the look can actually send the SQL past.

 

 

 

Second way, the use of pre-compiled MySQL.

 

static void main public (String [] args) { 

    the try { 

        Final driverClassName String = "com.mysql.jdbc.Driver"; 
        Final URL2 String = "JDBC:? MySQL: //10.6.8.4: 3306 / SBLOG = useServerPrepStmts to true" ; the focus here to see an increase useServerPrepStmts = true

        final String username = "sdl";
        final String password = "sdl";


        Connection connection = DriverManager.getConnection(url2, username, password);

        String sql = " SELECT *\n" +
                "   FROM t_web\n" +
                "  WHERE id = ? and name like ?";

        Class.forName(driverClassName);

        PreparedStatement preparedStatement = connection.prepareStatement(sql);

        preparedStatement.setInt(1, 1);

        preparedStatement.setString(2, "%ing%");


        ResultSet rst = preparedStatement.executeQuery();

        rst.next();

        System.out.println(rst.getString(2));
    } catch (Exception e) {
        e.printStackTrace();
    }

}

Here is a screenshot of wireshark when calling MySQL. You can actually look parameter is a placeholder?.

 

 

 

mybatis this framework is the same. The key to your jdbc url how to configure, and the frame does not matter.