http://www.perlmonks.org?node_id=1071491


in reply to Escaping %params

Use the quote method of your database handle:

my $escapeId = $dbh->quote( $params{id} )

In Section Seekers of Perl Wisdom