$var = $dbh->quote( $var ); # I could also use placeholders