Placeholder
                                                       v
String sql = "INSERT INTO my_table (col_string) VALUES(?)";
PreparedStatement pstmt = connection.prepareStatement(sql);
                    ^
                 Prepared statement