@drq IIRC, instead of `?` you can use `$1`, `$2` and so on.

If you're tired of writing SQL strings by hand, we maintain the sqrl project at my current job:
https://github.com/SharperShape/sqrl

It's a bit nicer than concatenating strings with possible typos all the time :)