my $sth = $dbh->prepare('insert into foo values (?,?)');

   my $dodgy_one = q%some stuff with ' and " in%;
   my $dodgy_two = q%more dodgy ' $ "£SS%;

   $sth->execute($dodgy_one, $dodgy_two);