Ah. The addslashes() I did know about. It's not quite as nice as DBI placeholders.

Thanks for the info.