my $statement = "Insert into tableOne (filename, letter) values (?, ?)";
...
$sth->execute($filename, $letter);