DB-API execute params, am I missing something?

[Lawrence D'Oliveiro]

In message <mailman.766.1243354300.8015.python-list at python.org>, Dennis Lee 
Bieber wrote:

> Notice that db.literal() call? That's part of the mechanism used to
> escape and quote parameters -- it only returns strings that are safe for
> insertion into the SQL statement.

Does it deal with "like"-wildcards?