ODBC SQL tracer file question marks
This is called a parameterized statement. At the basic level, such a query is executed in two stages: first a query with parameter markers (those question marks) is compiled on the server side, then the actual parameter values are bound to the query and the query is run, returning only results that match the criteria (obviously).