Parameterized query

Also written: parameterized queries, parameters

A SQL query where `?` marks a value the database fills in separately, so the value is always data and never part of the command. This is the defense SQL injection got, and LLMs lack an equivalent.