How to use the execute query with passing parameters for the oracle database - Insert or select from database

I have tried with the execute query -
select * from tablename where ID =@ID
here @ID is a parameter of type string.

Anybody experience this issue ?
how to resolve this ?

Thanks
Vallar

@Dominic, can you suggest me on this ?