PreparedStatement / Statement

String sql = "delete from tbl_book where title=?";

PreparedStatement ps = conn.prepareStatement(sql);

ps.setString(1, title);

ps.executeUpdate();

String sql= "insert into tbl_book values('"+title+"',"+price+",'"+name+"',"+page+")";

Statement st = conn.createStatement();

st.executeUpdate(sql);