my $sth = $dbh->prepare("SELECT CONCAT('My', '''', 'QL')");

##</code><code>##

my $sth = $dbh->prepare('SELECT CONCAT(?, ?, ?)');
$sth->execute(qw(My ' QL));