 
  statement =con.prepareStatement("SELECT * from employee WHERE  userID = :userId");
  statement.setString(userId, userID);
  ResultSet rs = statement.executeQuery();