my $sql = $dbh->quote($foo);
$dbh->do($sql);