Mask data in sql

mask data in sql

SUBSTR (empno, 1, 3)    -- first 3 characters|| 'XXXX'|| SUBSTR (empno, -3)   -- last 3 characters