in reply to Quick DBI do question

Using placeholders (?) is absolutely preferable.