Parameter Binding with INSERT Statements
When you use a parameter binding, you use "?" (question mark) instead of actual values in a SQL statement. The "?" parameter must be used in place of a value for that column and not in arbitrary expressions.
The current parameter bindings are used whenexecuteUpdate() is invoked for an INSERT statement. Parameter bindings can also be used with multi-row inserts.
Example of parameter binding:
INSERT INTO mytable (col1, col2) VALUES (?,?),(?,?),(?,?)
Note: The maximum number of parameters on a given INSERT statement is 999.