my $sql = "SELECT * FROM table WHERE NAME=$name"

##</code><code>##

my $sql = "SELECT * FROM table WHERE NAME='$name'";

##</code><code>##

SELECT * FROM table WHERE NAME='Tom';
DELETE FROM table;
SELECT * FROM table WHERE NAME='Bob'