PHP版SQL::MakerでJSON SQL Injectionの対応版を出しました ref: http://qiita.com/uchiko/items/490aee47362ca39d603a

sample.php

$builder = new SQL_Maker(array('driver' => 'mysql', 'strict' => 1));

$builder->select('user', array('*'), array('name' => sql_in(array('foo', 'bar'))));
// => SELECT * FROM `user` WHERE `name` IN (?, ?)

sample4.php

<?php
//「http://domain/sample4.php?id[TEST]=1」というURLでアクセス

// 数値が入る想定だが、
// この場合は array('TEST' => 1) になる。
$id = $_GET['id'];

$builder = new SQL_Maker(array(
    'driver' => 'mysql'
));

$table = 'user';
$column = array('id', 'name');
$where = array('id' => $id);

list($sql, $binds) = $builder->select($table, $column, $where);
// => SELECT `id`, `name` FROM `user` WHERE (`id` TEST ?)