my $script = param('select') or ...; ... $dbh->do("UPDATE guestlog SET script='$script' WHERE host='$host'"); #### my $script = param('select') or ...; ... $dbh->do("UPDATE guestlog SET script=? WHERE host=?", undef, $script, $host); #### $sth = $dbh->prepare( "SELECT * FROM guestlog WHERE host='$host'"); $sth->execute(); #### $sth = $dbh->prepare("SELECT * FROM guestlog WHERE host=?"); $sth->execute($host);