in reply to SQL Injection myths under DBI?

--. I'm in the "really bad advice please ignore" camp. Sorry :-)

For example:

As you can read from DBI manpage, the do() and prepare() methods happen to assume a single statement

Unless you're using a driver that does allow multiple statements. Like DBD::Sybase.