in reply to Preventing SQL injection attacks: Placeholders are enough for MySQL, Postgresql and SQLite
Michael