如何在SQL 语句中加入参数？

Question

desc test
id number
name varchar2(8)select * from test where id=12345;

Answer 1

SELECT CategoryID, CategoryName, Description 
FROM Categories 
WHERE CategoryID = &categoryid

Answer 2

SELECT CategoryID, CategoryName, Description 
FROM Categories 
WHERE CategoryID ='&1'
AND CategoryName='&2'
AND Description='&3'

Answer 3

create procedure pro(p_categoryid in varchar2)
as
v_CategoryID Categories.CategoryID%type;
v_CategoryName Categories.CategoryName%type;
v_Description Categories.Description%type;
begin
SELECT CategoryID, CategoryName, Description into v_CategoryID, v_CategoryName, v_Description 
FROM Categories 
WHERE CategoryID =p_categoryid;
end;
/