Use placeholders. The new sql snippet

where custdata2.code = ?;
[download]

And the execute statement

$sth->execute($user_location) or die $dbh->errstr;
[download]

- Miller