JDBC statements

[Shivaprakash Shettihalli]

What the advantage of using Statement over Prepared Statement, not the reverse please

[Ben Souther]

Unlike a prepared statement, which has to be known ahead of time, a statement can take any string and try to execute it as a SQL statement. This is useful for programs that build SQL statement on the fly or that have to execute accept statements passed to it from other programs or components.

It should go without saying that this can be dangerous thing in certain environments (you originally asked this question in the servlets forum), if your code accepts SQL strings (or pieces of SQL Strings) from untrusted clients.

[Rob Spoor]

Statements are usually faster than PreparedStatements if you cannot reuse PreparedStatements. If you can, it determines on the number of times the PreparedStatement can be reused.