in reply to SQL Injection myths under DBI?
Use placeholders - it's not difficult to do, it avoids various quoting issues, it helps with security, and it usually gives you better performance.
Michael