http://www.perlmonks.org?node_id=643732


in reply to Simple question on SQL Injection

Use replaceable parameters (avoiding the need for validation and quoting).

In Section Seekers of Perl Wisdom