in reply to SQL Injection myths under DBI?
Let me just say that again: Bind variables are easy and improve performance under many databases. Just use them.