http://download.oracle.com/javase/tutorial/jdbc/basics/prepared.html
PreparedStatement stmt = null;
Connection conn = null;
try {
Class.forName("oracle.jdbc.driver.OracleDriver");
conn = DriverManager.getConnection(
"jdbc:oracle:thin:@10.225.115.44:1521:test",
"PIPEADMIN", "PIPEADMIN");
String sqlStr;
for(int i = 0; i < iurFolder.list().length; i++) {
iurFile = new File(fileNames[i]);
sqlStr = "insert into t_iur(iur_id,queue_id,pcc,iur_file_name)" +
" values(sq_t_iur.nextval,'queue001','pcc001',?)";
stmt = conn.prepareStatement(sqlStr);
stmt.setString(0, fileNames[i]);
stmt.executeUpdate(sqlStr);
}