First post here ... having a bit of a problem, I know you can use the DBI function quote() to properly escape characters before using in a sql statement ... however in this case -full- sql statements are being passed (not just the content part) so I don't believe I can use 'quote()' ... is this correct? If I can't use 'quote()' in the normal fashion is their a function / module that performs the same function as 'quote()' without needing a db connection? I know 'quote()' changes the behavior based on the DB, but I just need something I can use that would escape for mysql ... if I can do this without a connection I might be able to get around the issue.
Thanks