查询问题

有如下一段代码。。public User check(String name,String pwd){
     Connection conn=null;
conn=DataBaseConnection.getConnection();
PreparedStatement pstmt=null;
ResultSet rs=null;
User user=null;
String sql="select name,pwd from account where name=?,pwd=?";
try {
pstmt=conn.prepareStatement(sql);
pstmt.setString(1, name);
pstmt.setString(2, pwd);
rs=pstmt.executeQuery();//这个是第34行。。
if(rs.next()){
user.setName(rs.getString(1));
user.setPwd(rs.getString(2));
}
rs.close();

} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}

return user;
    
    }当我测试的时候，总是报这个异常
java.sql.SQLException: ORA-00933: SQL command not properly ended at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:124)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:304)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:271)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:622)
at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:180)
at oracle.jdbc.driver.T4CPreparedStatement.execute_for_describe(T4CPreparedStatement.java:419)
at oracle.jdbc.driver.OracleStatement.execute_maybe_describe(OracleStatement.java:895)
at oracle.jdbc.driver.T4CPreparedStatement.execute_maybe_describe(T4CPreparedStatement.java:451)
at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:985)
at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:2887)
at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:2928)
at sml.User.check(User.java:34)
at sml.Txt.main(Txt.java:9)哪位大神指导一下啊