Insert record using Prepared Statement in Java

PreparedStatement is an interface and has pre-compiled SQL statements. PreparedStatements are used to efficiently execute the same SQL statement multiple times. They are also used to set the parameters in query dynamically.

Steps to Insert record using Prepared Statement

1. Get a connection Object

1	Connection connection = getConnection();

2. Create a prepareStatement object

String insertSql = "INSERT INTO employee_details"

+ " (id,first_name,last_name,designation,salary) "

+ " VALUES (?,?,?,?,?)";

PreparedStatement preparedStatement = connection.prepareStatement(insertSql)

3. Add parameters (if required)
As you can see we have ? in the query. So thats a parameter and we need to pass values for that parameter.

preparedStatement.setInt(1, 1);

preparedStatement.setString(2, "Steve");

preparedStatement.setString(3, "JJ");

preparedStatement.setString(4, "Sr Developer");

preparedStatement.setInt(5, 5000);

The first parameter in the setInt method is the parameterIndex and the 2nd param is the parameter value for the query.

Please note: ParameterIndex starts from 1.

4. execute the query using executeUpdate.

1	int rowCount = preparedStatement.executeUpdate();

Full Example : Insert record using Prepared Statement

package com.kscodes.sampleproject.jdbc;

import java.sql.Connection;

import java.sql.DriverManager;

import java.sql.PreparedStatement;

import java.sql.SQLException;

public class PreparedInsertExample {

public static String DRIVER_CLASS_NAME = "com.mysql.jdbc.Driver";

public static String CONNECTION_URL = "jdbc:mysql://localhost:3306/mysql";

public static String CONNECTION_USER = "kscodes";

public static String CONNECTION_PASSWORD = "kscodes";

public static void main(String[] args) {

String insertSql = "INSERT INTO employee_details"

+ " (id,first_name,last_name,designation,salary) "

+ " VALUES (?,?,?,?,?)";

try (Connection connection = getConnection();

PreparedStatement preparedStatement = connection.prepareStatement(insertSql)) {

preparedStatement.setInt(1, 1);

preparedStatement.setString(2, "Steve");

preparedStatement.setString(3, "JJ");

preparedStatement.setString(4, "Sr Developer");

preparedStatement.setInt(5, 5000);

int rowCount = preparedStatement.executeUpdate();

System.out.println("Record inserted successfully in database. Row Count returned is :: "

+ rowCount);

} catch (SQLException e) {

System.out.println("An exception occured while inserting data in database. Exception is :: " + e);

}

public static Connection getConnection() {

try {

Class.forName(DRIVER_CLASS_NAME);

} catch (ClassNotFoundException e) {

System.out.println("Error while registering JDBC driver");

return null;

}

Connection connection = null;

try {

connection = DriverManager.getConnection(CONNECTION_URL,

CONNECTION_USER, CONNECTION_PASSWORD);

} catch (SQLException e) {

System.out.println("Failed to create Connection");

return null;

}

System.out.println("Connection created Successfully.");

return connection;

}

Output

1 2	Connection created Successfully. Record inserted successfully in database. Row Count returned is :: 1

Reference

1. Statement executeUpdate()