带变量的SQL语句

1.insert

String title = " hello " ;
String username = " Joe " ;
  DBLinkBean DBLink = new  DBLinkBean();
  String sql = " INSERT INTO shoppingCart VALUES(' " + username + " ',' " + title + " ') " ;
  DBLink.executeQuery(sql);