? parameter in mysql query

Shell Programming and Scripting
1

I am debugging some code and came across ? in the WHERE cause in a mysql query.

Is this possible and what situations would this be used?

SELECT ip, count
FROM  table
WHERE domain=?

thanks & regards

2

yOU CAN USE THE FOLLOWING . iS IT WHAT U WANT ?

SELECT IP,COUNT FROM TABLE where DOMAIN LIKE '%%' ;

3

? is a parameter placeholder. That way you don't have to directly compose the SQL with parameters given (failure to escape the parameters properly is the major reason for SQL injection attacks).

Typically, the ? is not valid at the database layer. Normally the database library will dynamically replace them with the parameters (converting where necessary) in the SQL and pass the resulting the query to the database. In other cases, the database engine may accept placeholders itself, especially true if the db supports prepared statements so that an SQL can be prepared once, thus allowing it to be instantiated multiple times to perform the same query with different set of parameters.