- push @where, 'LOWER(svc_circuit.circuit_id) = \''.lc($string).'\'';
- push @where, 'LOWER(circuit_provider.provider) = \''.lc($string).'\'';
- push @where, 'LOWER(circuit_type.typename) = \''.lc($string).'\'';
+ push @where, 'LOWER(svc_circuit.circuit_id) = LOWER(' . dbh->quote($string) . ')';
+ push @where, 'LOWER(circuit_provider.provider) = LOWER(' . dbh->quote($string) . ')';
+ push @where, 'LOWER(circuit_type.typename) = LOWER(' . dbh->quote($string) . ')';