According to how DBI, DBAPI2, and PDO are designed, it&#x27;s database driver&#x27;s job
to add escaping as appropriate (if not using binary encoding; but this is
driver&#x27;s call, too), so there&#x27;s not much to exploit. Remember that you don&#x27;t
only quote single-quotes with a backslash, you also need to quote backslashes
in raw input, too. Only the bandwidth could be of any concern, but I don&#x27;t
remember any database with a text-based communication protocol.