title: Can I pass table name as argument to a java prepared statement?
body: <p>I am writing a DAO layer IN Java for my Tomcat server application, </p>
  
  <p>I wish to use Prepared Statement wrapping my queries (1. parsing queries once, 2. defend against SQL injections), 
  My db design contains a MyISAM table per data source system. And most of the queries through DBO are selects using different table names as arguments.</p>
  
  <p>Some of this tables may be created on the fly.</p>
  
  <p>I already went though many posts that explain that i may not use table name as an argument for Prepared statement.</p>
  
  <p>I have found solutions that suggest to use some type of function (e.g. mysql_real_escape_string) that may process this argument and append the result as a string to the query,</p>
  
  <p>Is there any built in Jave library function that may do it in the best optimized way, or may be you may suggest to do something else in the DAO layer (i do not prefer to add any routines to the DB it self)?</p>