Nah, it will end up simply as "John" in the database. You need "John%sDoe" to crash C software with unsafe printf() calls, and even then it's better to use several "%s"

C and C derivatives will be fine unless they're fucking up encoding.

With an address in 's-Hertogenbosch to help people who are lazy about escaping.