Parameter Binding with INSERT Statements

When you use a parameter binding, you use "?" (question mark) instead of actual values in a SQL statement. The "?" parameter must be used in place of a value for that column and not in arbitrary expressions.

The current parameter bindings are used whenexecuteUpdate() is invoked for an INSERT statement. Parameter bindings can also be used with multi-row inserts.

Example of parameter binding:

INSERT INTO mytable (col1, col2) VALUES (?,?),(?,?),(?,?)
Note: The maximum number of parameters on a given INSERT statement is 999.