I’m fairly new to SQL and I’m currently reworking a java program that another
programmer has developed. When I print one of his query select statements the script contains sql syntax:
SELECT * from database WHERE id = ?
I just want know what =? is supposed to do? I’ve been googling around and I can’t find any relevant answer.
It’s not a SQL notation, but a JDBC (Java Database Connectivity) notation. The
?gets replaced with a parameter that is specified separately. Using this approach, instead of trying to substitute the parameter yourself into the string, helps prevent the risk of SQL injection.