配置文件及工具类参考1

package com.jdsc;import javax.rmi.CORBA.Util;
import java.sql.*;
import java.util.Scanner;/*** @author Alina* @date 2022年02月06日 12:13 上午* 判断用户登录是否成功* 使用prepareStatement 执行SQL谨防SQL注入*/
public class jdbcDemo7 {public static void main(String[] args) {Scanner sc = new Scanner(System.in);System.out.println("请输入姓名：");String name = sc.nextLine();System.out.println("请输入密码：");String password = sc.nextLine();boolean login = new jdbcDemo7().login(name,password);if(login){System.out.println("登录成功");}else {System.out.println("失败");}}public boolean login(String name,String password){if(name==null||password==null){return false;}Connection conn = null;//返回值值是PreparedStatement类型PreparedStatement pstmt = null;ResultSet res = null;try {//1.连接数据库conn = Utils.JDBCUtils.getconnection();
//            2.定义SQL select * from user where name = ''and password = '';
//            String sql = "select * from user where name = '"+name+"'and password = '"+password+"'";
//            重新定义SQLString sql = "select * from user where name = ? and password = ?";
//            3.获取执行SQL的对象
//            stml = conn.createStatement();
//            使用prepareStatement 执行SQL谨防SQL注入pstmt = conn.prepareStatement(sql);//使用PreparedStatement serString()方法传入sql语句，第一个值是位置，第二个是参数pstmt.setString(1,name);pstmt.setString(2,password);res = pstmt.executeQuery();//            res = stml.executeQuery(sql);return res.next();} catch (SQLException throwables) {throwables.printStackTrace();}finally {//修改第二个参数Utils.JDBCUtils.close(res,pstmt,conn);}return false;}
}