in reply to Re: Prevent SQL Injection
in thread Prevent SQL Injection

Shouldn't the example include a placeholder?

my $insert = $dbh->prepare("INSERT INTO my_table (my_column) VALUES( ? )");