Characters are used as placeholders in the SQL string.
An array is created with the dynamic data. The order of items must match the order used
in the SQL string.
Pass the array with dynamic data as an argument to the execute() method.