The term to Super Search for is "placeholders" (or google "dbi placeholders" for lots more). This is a related recent node: Managing Dynamic SQL -- discusses modules that take care of creating where clauses/sql statements for you, including placeholder support.