Login.java ~~~ package zyw.crud; import java.sql.*; public class Login { public void login(String name,String pass) throws SQLException, ClassNotFoundException { // 1、注冊數據庫的驅動 Class.forName("com.mysql.jdbc.Driver"); // 2.獲取數據庫連接 String url="jdbc:mysql://122.14.200.136:3306/javadb"; Connection connection = DriverManager.getConnection(url, "root", "6a133f0024"); //3.獲取操作數據庫的對象 Statement statement= connection.createStatement(); String sql = "select * from user WHERE name='"+name+"'AND pass='"+pass+"'"; ResultSet resultSet=statement.executeQuery(sql); //4.遍歷結果集，取出數據 if (resultSet.next()){ String name1=resultSet.getString("nickname"); System.out.println(name1+"登錄成功" ); }else{ System.out.println("登陸失敗"); } //5.關閉對象 resultSet.close(); statement.close(); connection.close(); } public void login1(String name,String pass) throws SQLException, ClassNotFoundException { // 1、注冊數據庫的驅動 Class.forName("com.mysql.jdbc.Driver"); // 2.獲取數據庫連接 String url="jdbc:mysql://122.14.200.136:3306/javadb"; Connection connection = DriverManager.getConnection(url, "root", "6a133f0024"); //3.獲取操作數據庫的對象 //Statement statement= connection.createStatement(); //String sql = "select * from user WHERE name='"+name+"'AND pass='"+pass+"'"; String sql="select * from user WHERE name=? AND pass=?"; PreparedStatement preparedStatement = connection.prepareStatement(sql); //ResultSet resultSet=statement.executeQuery(sql); preparedStatement.setString(1,name); preparedStatement.setString(2,pass); ResultSet resultSet = preparedStatement.executeQuery(); //4.遍歷結果集，取出數據 if (resultSet.next()){ String name1=resultSet.getString("nickname"); System.out.println(name1+"登錄成功" ); }else{ System.out.println("登陸失敗"); } //5.關閉對象 resultSet.close(); //statement.close(); preparedStatement.close(); connection.close(); } } ~~~ 單元測試LoginTest.java ~~~ package zyw.crud; import org.junit.After; import org.junit.Before; import org.junit.Test; import java.sql.SQLException; import static org.junit.Assert.*; public class LoginTest { @Before public void setUp() throws Exception { } @After public void tearDown() throws Exception { } @Test public void login() throws SQLException, ClassNotFoundException { Login login=new Login(); // login.login("xm","123"); //login.login("a' or 'a'='a","a' or 'a'='a");//a' or 'a'='a login.login1("a' or 'a'='a","a' or 'a'='a"); // login.login1("xm","123"); } } ~~~