Use Placeholders

my $sth = $dbh->prepare("SELECT userid, login_name, realname FROM prof
+iles WHERE login_name = ?");

# and then

$sth->execute($user_login_name);
[download]

Cheers,
Darren