In this technique, an SQL statement string is created with placeholders - a question mark for each parameter code example

Example: java sql question mark

ODBCCommand cmd = new ODBCCommand("SELECT thingA FROM tableA WHERE thingB = ?")
cmd.Parameters.Add(7)
result = cmd.Execute()