title: How to avoid "Security - A prepared statement is generated from a nonconstant String" FindBugs Warning
body: <p>I am working on a project that has a piece of code like the one below:</p>
  
  <pre><code>String sql = "SELECT MAX(" + columnName + ") FROM " + tableName;                
  PreparedStatement ps = connection.prepareStatement(sql);
  </code></pre>
  
  <p>Is there any way that I can change this code so that FindBugs stop giving me a 
  "Security - A prepared statement is generated from a nonconstant String" warning ?</p>
  
  <p>Please assume that this code is safe regarding SQL INJECTION since I can control elsewhere in the code the possible 
  values for "tableName" and "columnName" (they do not come come directly from user input).</p>