$var = $dbh->quote($var);