http://www.perlmonks.org?node_id=716541


in reply to Preventing SQL injection attacks: Placeholders are enough for MySQL, Postgresql and SQLite

What about testing with the string
my $evil = join '', map chr, 0..255;