I have ddb working, but I don't know how to pass parameters to queries (without concatenating strings, which is unsafe and awkward). That is, I'm looking for something like this:

PGCommand(conn, "SELECT * FROM foo WHERE bar = ?", barValue);

Suggestions?