$user = $dbh->quote($user);