Saving Data on Android

Construc/ng the query
The statement to perform a query on the user dictionary database looks like this:
cursor = contentResolver.query( 
    
// 1
 
    UserDictionary.Words.CONTENT_URI,    
    
// 2
 
    projection,                        
    
// 3
 
    selectionClause,                    
    
// 4
 
    selectionArgs,       
    
// 5
 
    sortOrder                           
)
The 
contentResolver
 object that is part of a 
context
 is utilized to call the query 
function and a list of arguments can be passed if necessary. The only required 
argument is the content URI. Below is an explanation of each of the parameters.
Saving Data on Android
Chapter 4: ContentProvider
raywenderlich.com
74

---

1. The content URI of the provider including the desired table.
2. The columns definitions to return for each row, this is a string array.
3. The selection clause, similar to a 
WHERE
 clause only excluding the where. A 
?
 is 
used in place of arguments.
4. The arguments to be utilized for the selection clause that fill in the 
?
.
5. The sort order such as 
"ASC"
 or ```"DESC"``.`
Note
: Allowing raw SQL statements from external sources can lead to 
malicious input from SQL injection attempts. Using the selection clause with 
?
 
representing a replaceable parameter and an array of selection arguments 
instead can prevent the user from making these attempts.
A content provider not only allows data to be read by an outside application, the data 
can also be updated, added to or deleted.