# mySQL escape character
my $sql_escape_char = '\\';

...

$data{pub_source} =~ s/(')/$sql_escape_char'/gs;
$data{headline} =~ s/(')/$sql_escape_char'/gs;
$data{summary} =~ s/(')/$sql_escape_char'/gs;