parse placeholder in a sql statement