使用Java代码操作数据库的注意事项

public void updateUser(User user, String columnLabel, Object value) {
        connection = JDBCUtils.getConnection();
        String sql = "update user set ? = ? where uid = ?";
        try {
            ps = connection.prepareStatement(sql);
            ps.setObject(1,columnLabel);
            ps.setObject(2,value);
            ps.setInt(3,user.getUid());
            ps.executeUpdate();
        } catch (SQLException e) {
            System.out.println(this.getClass()+"updateUser");
            e.printStackTrace();
        }finally {
            JDBCUtils.close(connection,ps,rs);
        }
        System.out.println("修改成功");
    }

String sql = "update user set "+columnLabel+" = ? where uid = ?";
ps.setObject(1,value);
ps.setInt(2,user.getUid());