[throwaway0010]

A few popular database drivers use escaping under the hood for parameterized query arguments. mysql2 ruby gem (and any rails stack on top of it) for example.

[astrodust]

They probably do a better job of it than you do, so let them handle it.