bind_insert

<?

$write = Mage::getSingleton("core/resource")->getConnection("core_write");
$query = "insert into mage_example (name, email, company, description, status, date) values (:name, :email, :company, :desc, 0, NOW())";
$binds = array(
    'name'      => "name' or 1=1",
    'email'     => "email",
    'company'   => "company",
    'desc'      => "desc",
);

$write->query($query, $binds);