mysql-Parameterindexoutofrange

代码如下 求解哪里错误
package com.pact.mobilestore;

import java.io.IOException;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class openorder extends HttpServlet {

/** *  */private static final long serialVersionUID = 1L;public void doPost(HttpServletRequest request, HttpServletResponse response)        throws ServletException, IOException {    // 统一编码格式    request.setCharacterEncoding("UTF-8");    response.setContentType("text/html; charset=UTF-8");    Connection conn = null; // 连接对象    PreparedStatement preparedStatement = null;    HttpSession session = request.getSession();    Object obj = session.getAttribute("currId");    String UId = (String) obj;    String option = request.getParameter("option");    int op =Integer.parseInt(option);       switch(op)     {     case 0:         try {            Class.forName("com.mysql.jdbc.Driver");            String url = "jdbc:mysql://localhost:3306/mobilestore";            String userName = "root";            String pass = "root";            conn = DriverManager.getConnection(url, userName, pass);            String sql = "select * from `order` where UId =?";            preparedStatement = conn.prepareStatement(sql);            preparedStatement.setString(1, UId);            java.sql.ResultSet rs = preparedStatement.executeQuery();            List list = new ArrayList();            while (rs.next()) {                Entery4 ent4 = new Entery4();                String OId = rs.getString("OId");                String Date = rs.getString("Date");                String payDate = rs.getString("payDate");                String Total = rs.getString("Total"); // 购买的数量                String state = rs.getString("state");                ent4.setOId(OId);                ent4.setUserId(UId);                ent4.setDate(Date);                ent4.setPayDate(payDate);                ent4.setTotal(Total);                ent4.setState(state);                list.add(ent4);            }            rs.close();            request.setAttribute("info", list);        } catch (SQLException e) {            // TODO: handle exception            e.printStackTrace();        } catch (ClassNotFoundException e) {            // TODO Auto-generated catch block            e.printStackTrace();        } finally {            try {                preparedStatement.close();                conn.close();            } catch (Exception e2) {                // TODO: handle exception            }        }                       request.getRequestDispatcher("myorder.jsp").forward(request,                response);           break;        case 1:             try {                Class.forName("com.mysql.jdbc.Driver");                String url = "jdbc:mysql://localhost:3306/mobilestore";                String userName = "root";                String pass = "root";                conn = DriverManager.getConnection(url, userName, pass);                String sql = "select * from `order` where UId = ?and state =?";                preparedStatement = conn.prepareStatement(sql);                preparedStatement.setString(1, UId);                preparedStatement.setString(2, "未支付");                java.sql.ResultSet rs = preparedStatement.executeQuery();                List list = new ArrayList();                while (rs.next()) {                    Entery4 ent4 = new Entery4();                    String OId = rs.getString("OId");                    String Date = rs.getString("Date");                    String payDate = rs.getString("payDate");                    String Total = rs.getString("Total"); // 购买的数量                    String state = rs.getString("state");                    ent4.setOId(OId);                    ent4.setUserId(UId);                    ent4.setDate(Date);                    ent4.setPayDate(payDate);                    ent4.setTotal(Total);                    ent4.setState(state);                    list.add(ent4);                }                rs.close();                request.setAttribute("info", list);            } catch (SQLException e) {                // TODO: handle exception                e.printStackTrace();            } catch (ClassNotFoundException e) {                // TODO Auto-generated catch block                e.printStackTrace();            } finally {                try {                    preparedStatement.close();                    conn.close();                } catch (Exception e2) {                    // TODO: handle exception                }            }                           request.getRequestDispatcher("myorder1.jsp").forward(request,                    response);           break;        case 2:             try {                Class.forName("com.mysql.jdbc.Driver");                String url = "jdbc:mysql://localhost:3306/mobilestore";                String userName = "root";                String pass = "root";                conn = DriverManager.getConnection(url, userName, pass);                String sql = "select * from `order` where UId = ? and state =?";                preparedStatement = conn.prepareStatement(sql);                preparedStatement.setString(1, UId);                preparedStatement.setString(2, "已支付");                java.sql.ResultSet rs = preparedStatement.executeQuery();                List list = new ArrayList();                while (rs.next()) {                    Entery4 ent4 = new Entery4();                    String OId = rs.getString("OId");                    String Date = rs.getString("Date");                    String payDate = rs.getString("payDate");                    String Total = rs.getString("Total"); // 购买的数量                    String state = rs.getString("state");                    ent4.setOId(OId);                    ent4.setUserId(UId);                    ent4.setDate(Date);                    ent4.setPayDate(payDate);                    ent4.setTotal(Total);                    ent4.setState(state);                    list.add(ent4);                }                rs.close();                request.setAttribute("info", list);            } catch (SQLException e) {                // TODO: handle exception                e.printStackTrace();            } catch (ClassNotFoundException e) {                // TODO Auto-generated catch block                e.printStackTrace();            } finally {                try {                    preparedStatement.close();                    conn.close();                } catch (Exception e2) {                    // TODO: handle exception                }            }                           request.getRequestDispatcher("myorder2.jsp").forward(request,                    response);            break; 

// default:
// System.out.println("default");
// break;
}
}

public void doGet(HttpServletRequest req, HttpServletResponse resp)        throws ServletException, IOException {            doPost(req, resp);        }   

}

错误提示截取
java.sql.SQLException: Parameter index out of range (2 > number of parameters, which is 1).
at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:910)
at com.mysql.jdbc.PreparedStatement.setInternal(PreparedStatement.java:2715)
at com.mysql.jdbc.PreparedStatement.setString(PreparedStatement.java:3546)
at com.pact.mobilestore.openorder.doPost(openorder.java:56)
at com.pact.mobilestore.openorder.doGet(openorder.java:221)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:723)