SQL预处理

PreparedStatement ps=connection.preparedStatement();
Object[] param={new User().getName(),new User().getPwd()};
for(int i=0;i

HttpSession session=request.getSession();
session.setAttribute("name",new User().getName);