Question

I’ve been using PreparedStatements throughout my entire database where you can use setDate(index, data), however would it work to use a Date object like this?

"SELECT * FROM table WHERE date BETWEEN " + date + " AND " + otherDate

Are there any online tools that I can use to test this?

Answer 1

I do not believe this function will work:

"SELECT * FROM table WHERE date BETWEEN " + date + " AND " + otherDate

Since your trying to concatenate two Date objects with several String literals. You would need to use a DateFormatter to turn the Date into a String.

You should stick with the PreparedStatements and avoid creating SQL statements by concatenating Strings/Values. The PreparedStatement is going to offer you some protection against sql injection, while the String concatenation method is going to expose you to the risk of sql injection.