結果 : how to write parameterized sql query in java