Select Code to Download

my $sql = "select blargh from foo where bar = '".$bar_value."'";
my $bar_value = param('bar');
my $sth = $dbh->prepare($sql);

"somevalue'
union
...
(select field
from some_other_really big table)
and bar = 'somevalue"