What do you mean "putting " for every possible value"? Do you mean adding `'s around each variable place holder? (%s, %d, %f)
' is not " and not `. ' is to be put around string values. I find it stupid when people ask basic questions about SQL and they have hundreas of ` and ' symbols in their query. I call that noob SQL language.