java中的sql语句带参数

String sql="select * from Student where id='"+id+"'";

list.add("delete from dp_dto_persistence where tnt_inst_id = "+tntInstId+" and stmt_nbr = "+stmtNbr+"");