The table name isn't a parameter - you can't do that with PreparedStatement. You can either build your query string first (injection danger), use a stored procedure of some kind (maybe), or take...