title: how to build sql queries using c
body: <p>I was wondering if it is possible to build a string with the following code</p>
  
  <pre><code>char query[512];
  char *insert = "insert into tableName values("%s, "%s");"
  strcpy(query, insert);
  method("max", "1234"); //function which adds values inro %s
  </code></pre>
  
  <p>My questions, how can I add another char array into in place of %s if it is possible?
  Thanks beforehand.</p>