my $looking_for = 'some string with spaces';
my $sth = $dbh->prepare('select field from table where key=?');
$sth->execute($looking_for);