java.sql.Statement to java.sql.PreparedStatement