DBI also supplies a quote() method which will quote a string appropriately for your DB. This may save you from massive code refactoring.

my $quoted = $dbh->quote("Wouldn't you rather use bind parameters?");
[download]

TMTOWTDI, although some are certainly better than others.