quote

$sql = $db_handle->quote(string)