- sprintf: documentation ( source)
<?php
echo sprintf("SELECT * FROM staffstu WHERE lastname = %s OR
firstname = %s ORDER BY lastname, firstname ASC",
GetSQLValueString($colname_rs_txtSearchFirstname, "text",
$colname_rs_txtSearchFirstname, "text"));