String query = "SELECT * FROM information WHERE id = ?"; PreparedStatement pstmt = connection.prepareStatement(query, ... ); pstmt.setString(1, request.getParameter("information")); ResultSet results = pstmt.executeQuery( );