问号占位
String hql = "from Customer c where c.cname = ?";
Query query = session.createQuery(hql);
query.setString(0, name);
list = query.list();
自定义参数
String hql = "from Customer c where c.cname = :name";
Query query = session.createQuery(hql);
query.setString("name", name);
list = query.list();