in reply to Escaping SQL correctly

Now I just need the answer to "Escaping SQL entirely."