my $sql = 'INSERT INTO TableName(Date,FileName) VALUES(?,?)';

my $stmt = $settle_dbh->prepare($sql);

$stmt->execute($Date, $file); # no quoting needed