No, most SQL today uses placeholders and has since circa 2008. If you are sanitizing you are doing it wrong to begin with.