In Java, you don't build SQL queries by gluing strings together. You use https://www.jooq.org, of course.