my $name = "; DROP DATABASE mysql;";
my $sth = $dbh->prepare("INSERT INTO names (name) values (".$dbh->quote($name).")");
$sth->execute;