my $info = "insert into table1 values(:user,:filename,:filesize,:time,:direction)";
my $sth = $dbh->prepare($info);
$sth->bind_param(user => $user);
$sth->bind_param(filename => $filename);
$sth->bind_param(filesize => $filesize);
$sth->bind_param(time => $time);
$sth->bind_param(direction => $direction);
$sth->execute();