Query Mysql

Connection con = null;
HttpSession session = request.getSession(true);
Statement stmt = null;                              // For the query
ResultSet rs = null;                                //           
Statement stmt2 = null;                           // For the update
ResultSet rs2 = null;                             //            
String userName = "<username>";
String passWord = "<password>";
String url = "jdbc:mysql://<servername>/argus";
 
try{
    con = DriverManager.getConnection (url, userName, passWord);
    String getIt   =  "SELECT user from sessions where session = '"+session.getId()+"'";
          stmt = con.createStatement();
          rs = stmt.executeQuery(getIt);
          rs.next();
 
             String USERNAME = rs.getString("user");
             //out.println("Logged in as  :"+USERNAME);
             //int length = USERNAME.length();
             // Now for the update
             stmt2 = con.createStatement();
             String sql = "update progress set completed='Y',completed_by='"+USERNAME+"' where staffuser='"+INPUT+"'";
 
}
catch(Exception e ) { }