$sql = $dbh->quote($string)