preStatement = conn.prepareStatement("SELECT * FROM userTable where
                             username=? 
                              and password=?
                              and func=? ");
試試吧