PreparedStament sql预处理对象
PreparedStament pst =null;
String sql =" SELECT `userName`,`password` FROM `news_user` WHERE `userName` = ? AND `password` = ? " ;
Object[] pars ={user.getName(),user.getPwd()};
pst = connection.prepareStatement(sql);
for(int i =0;i<pars.length;i++;){
pst.setObject(i+1,parms[i]) //？占位符的初始下标为1，所以为了对应，i+1
}
int count = pst.excuteUpdate(); //执行失败返回-1 成功 有多少条返回多少条
Session
HttpSession session = request.getSession(); //创建session对象
session.setAttribute("name",name);//session赋值
${name} jsp前台页面获取
