$valuestring .= $db->quote({$_}) .",";

##</code><code>##

$db->prepare("INSERT INTO bla col=?, othercol=? ...");
$db->execute($value1,$value2 ...);