Use the percent sign (%) and the underscore character (_) to match parts of an incoming SQL statement.
The percent sign matches an undefined number of characters. The percent sign can match zero. The underscore character matches one character. The asterisk (*) is not a wildcard because it is a valid SQL syntax.