Java jdbc query with parameters

// passing parameters in prepareStatement method
statement =con.prepareStatement("SELECT * from employee WHERE  userID = :userId");
statement.setString(userId, userID);

// or
statement =con.prepareStatement("SELECT * from employee WHERE  userID = ?");
statement.setString(1, userID);

ResultSet rs = statement.executeQuery();