用PreparedStatement

-----------

Connection conn=JDBC_Util.getConnection();
String sql="insert into test(text) values(?)";
Preparedment ps=conn.preparedStatement();
File file=new File("...");
InputStream is = new FileInputStream(file);
ps.setBinaryStream(1,is,(int)file.length());//length()返回值是long, mysql未实现jdbc接收long的方法
int result = ps.executeUpdate();
System.out.println(result);
JDBC_Util.close();