Ok, just be sure you're using placeholders so your external data doesn't ever become part of the SQL command. See the DBI documentation for more on that.