You can use "?" as the placeholder in sql for parameter in db.rawQuery in Android For example CodeString sql= "select Id , Name, Note from notewhere Name = ?";     Cursor c = db.rawQuery(sql, new String[] { name.toUpperCase() }); How… more »