title: PreparedStatement question in Java against Oracle
body: <p>I'm working on the modification of some code to use preparedStatement instead of normal Statement, for security and performance reason.</p>
  
  <p>Our application is currently storing information into an embedded derby database, but we are going to move soon to Oracle. </p>
  
  <p>I've found two things that I need your help guys about Oracle and Prepared Statement : </p>
  
  <p>1- I've found <a href="http://www.oracle.com/technology/tech/java/sqlj_jdbc/htdocs/jdbc_faq.html#06_24" rel="nofollow noreferrer">this document</a> saying that Oracle doesn't handle bind parameters into IN clauses, so we cannot supply a query like :</p>
  
  <pre><code>Select pokemon from pokemonTable where capacity in (?,?,?,?)
  </code></pre>
  
  <p>Is that true ? Is there any workaround ? ... Why ? </p>
  
  <p>2- We have some fields which are of type TIMESTAMP. So with our actual Statement, the query looks like this : </p>
  
  <pre><code>Select raichu from pokemonTable where evolution = TO_TIMESTAMP('2500-12-31 00:00:00.000', 'YYYY-MM-DD HH24:MI:SS.FF')
  </code></pre>
  
  <p>What should be done for a prepared Statement ? Should I put into the array of parameters : 
  2500-12-31 or TO_TIMESTAMP('2500-12-31 00:00:00.000', 'YYYY-MM-DD HH24:MI:SS.FF') ?</p>
  
  <p>Thanks for your help, I hope my questions are clear ! </p>
  
  <p>Regards,</p>