sky_phone-sky-systems/.agents/skills/oxmysql/placeholders.md

Placeholders

Use ? for values; parameters as array or object. Prevents SQL injection.

MySQL.scalar('SELECT `username` FROM `users` WHERE `identifier` = ? AND `group` = ?', { identifier, group })

Named placeholders (@name) are deprecated; use positional ? and pass array. For prepared statements use rules/prepare.md (only ? and ?? for column names).

Reference: Placeholders – coxdocs.dev.