my $info = "insert into table1 values('$user','$filename','$filesize','$time','$direction')";
my $sth = $dbh->prepare($info);
$sth->execute();

##</code><code>##

my $info = "insert into table1 values (?, ?, ?, ?, ?)";
my $sth = $dbh->prepare($info);
$sth->execute($user, $filename, $filesize, $time, $direction);

##</code><code>##

my $info = "insert into table1 values(:user,:filename,:filesize,:time,:direction)";
my $sth = $dbh->prepare($info);
$sth->bind_param(user => $user);
$sth->bind_param(filename => $filename);
$sth->bind_param(filesize => $filesize);
$sth->bind_param(time => $time);
$sth->bind_param(direction => $direction);
$sth->execute();