in reply to DBI confusion

Read the DBI docs on placeholders. Your code is easily exploited.

In Section Seekers of Perl Wisdom