Revisit your DBI documentation. While data tainting in DBI isn't officially finalized (per the documentation), it certainly exists right now. Also, see my other post for info on preventing tainted data from going out to STDOUT.

DBI->connect('dbi:...', ... {
    Taint => 1,
    TaintOut => 1,
    TaintIn => 1 })
[download]