I would like to re-iterate, use placeholders. It will get you better performance & protection from SQL injection problems.

Les