Direct code on:
Normal mode:
String sql = "select * from tb_product where id=?";
preparedStatement.setString(1,id);
When preparedStatement like and combined,
just so you can:
String sql = "select * from tb_product where id like ? ";
preparedStatement.setString(1,"%"+id+"%");