jdbc PreparedStatement变量替换

package com.zhanghao.local;

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;

public class localtest {
public static void main(String[] args) throws Exception {

String DRIVER = "org.sqlite.JDBC";
String URL = "jdbc:sqlite:D:\\Java_projects\\data.db";
String sql = "insert into user(name,password)values(?,?)";
String name="zhangsan";
String password="12345";

Class.forName(DRIVER);
Connection conn = DriverManager.getConnection(URL);
PreparedStatement pstmt = conn.prepareStatement(sql);

pstmt.setObject(1, name);
pstmt.setObject(2, password);

int update = pstmt.executeUpdate();
System.out.println(update);
}
}