Parameterized queries #96

Hi there

In the examples you insert data in tables like this:

session.executeStatement('INSERT INTO pokes VALUES(123, "Hello, world!"');

Are parameterized queries comming or how would you handle sanitizing this string against sql injections?
We need to insert user input.

Thank you