To me this is a failing of popular SQL APIs that don&#x27;t provide a good way to escape characters and force you to either deal with horribly clumsy prepared statement APIs or just concatenate strings together.