This would open a security leak as you don't quote the value. Please use DBObject->Quote.