Even though this is unlikely to end up in a disaster, I'd probably not acquire the habit on weaving strings into SQL queries directly.