What is the difference between Statement and PreparedStatement in JDBC?

In JDBC, Statement and PreparedStatement are two interfaces that are used to execute SQL queries within Java applications. The main difference between them is how they handle SQL queries and parameters.

Statement Interface:

• Statement interface is used to execute static SQL queries.
• It does not support parameters, which means the SQL query is directly embedded within the code.
• Every time a query is executed using Statement, it is compiled and executed, which can lead to performance issues in case of repetitive queries.

PreparedStatement Interface:

• PreparedStatement interface is used to execute dynamic SQL queries.
• It supports parameters, allowing developers to set parameters dynamically before executing the query.
• PreparedStatement queries are precompiled, which improves performance when the same query is executed multiple times.

Overall, PreparedStatement is preferred over Statement for its performance benefits and protection against SQL injection attacks.

References: Statement Interface, PreparedStatement Interface