public static void main(String[] args) {
		Connection conn = null;
		Statement stmt = null;
		ResultSet rs = null;
		try {
			Class.forName(JDBC_DRIVER);
			conn = DriverManager.getConnection(DB_URL, USER, PASS);
			stmt = conn.createStatement();
			String input = "b' or '1' = '1 ";
			Boolean bol = stmt.execute("SELECT id, firstname, surname FROM staff WHERE surname LIKE '%"+input+"';");
			if(bol){
				rs = stmt.getResultSet();
				while (rs.next()){
					int id = rs.getInt("id");
					String firstname = rs.getString("firstname");
					String surname = rs.getString("surname");
					
					System.out.print("ID: " + id);
					System.out.print(", firstname: " + firstname);
					System.out.println(", surname: " + surname);
				}	
			}
			
		} catch (ClassNotFoundException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} finally {
			try {
				if(rs != null){
					rs.close();
				}
				if(stmt != null){
					stmt.close();
				}
				if(conn != null){
					conn.close();
				}
			} catch (SQLException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			}
		}
	}