Of course you can use placeholders with do(). What makes you think otherwise?
🦛
In reply to Re: DBI do() SQL injection by hippo in thread DBI do() SQL injection by Anonymous Monk