title: How do I sanitize SQL without using prepared statements
body: <p>For some sql statements I can't use a prepared statment, for instance:</p>
  
  <pre><code>SELECT MAX(AGE) FROM ?
  </code></pre>
  
  <p>For instance when I want to vary the table. Is there a utility that sanitizes sql in Java? There is one in ruby.</p>