statement和preparestatement的区别

1.连接数据库的步骤中Statement和PrepareStatement的区别：Statement:String sql="insert into ...