Insert java byte array in table using Statement

Question

我们可以使用Statement类（不使用Prepared语句）将Java字节数组作为blob数据类型插入hsqldb表中吗？

Answer 1

Since you shouldn't insert user data into a SQL statement using string concatenation anyway, why do you care?

Using PreparedStatement is the right way to do it.

---

Though, technically, you could execute a SELECT statement, and insert the data using an updatable ResultSet , but I wouldn't recommend it. Inserting a row using a dummy SELECT statement is just plain unnecessary overhead.

Or you could build a HSQLDB Binary Literal , but why go through all that work, when you'll get it for free with a PreparedStatement ?