MAKING DYNAMIC SQL QUERIES WITH PLACEHOLDERS