BD Java lab 2

List<Client> clns = new ArrayList<Client>();
            Connection con = null;
            Statement stmt = null;

            try{
                if (address==null)
                    address="%";
                if (name==null)
                    name="%";

                String sql = "SELECT * FROM CLIENTS WHERE name like '" + name +"' and address like '" + address +"'";

                con = JdbcUtils.getConnection();
                stmt = con.createStatement();

                ResultSet rs = stmt.executeQuery(sql);
                while (rs.next()) {
                    Client cln = new Client();
                    cln.setId(rs.getInt("id"));
                    cln.setNo(rs.getInt("client_no"));
                    cln.setSsn(rs.getString("ssn"));
                    cln.setName(rs.getString("name"));
                    cln.setAddress(rs.getString("address"));
                    clns.add(cln);
                }

            } catch(SQLException ec) {
                ec.printStackTrace();
            } finally {
                JdbcUtils.closeStatement(stmt);
                JdbcUtils.closeConnection(con);
            }

            return clns;