这段代码错了怎么改，求大神

String sql="insert into student(stuId,stuName,stuPwd)**valuse('"**
+student.getStuId()+"','"+student.getStuName()+"'+'"+student.getStuPwd()+"')";
st.execute(sql);__

String sql="insert into student(stuId,stuName,stuPwd) valuse (
student.getStuId(),student.getStuName(),student.getStuPwd())";

String sql = "insert into student(stuId,stuName,stuPwd) values('" + student.getStuId() + "','" + student.getStuName() + "','" +
student.getStuPwd() + "')";
和你只有一点差别，就是 "'+'" ==> "','"

2楼已的sql中已经有了答案，应该是values，而不是valuse

String sql="insert into student(stuId,stuName,stuPwd) values (student.getStuId(),student.getStuName(),student.getStuPwd())";

我的回答跟问题无关哈，上边已经有正确答案了。我要说的就是在实际使用过程中是不建议像你这样拼接sql的，都是用占位符。你这样做会有sql注入风险