my $sql    = sprintf('INSERT INTO entry VALUES(%s, %s, %s, %s, %s, %s, %s, %s, %s)',
        $dbh->quote($host),
        $dbh->quote($filename),
        $dbh->quote($datestamp),
        $dbh->quote($type),
        $dbh->quote($size),
        $dbh->quote($from),
        $dbh->quote($to),
        $dbh->quote($subj),
        $dbh->quote($score)
);

##</code><code>##

my $sth = $dbh->prepare(  'INSERT INTO entry VALUES(?,?,?,?,?,?,?,?,?)'  );
$sth->execute( $host, $filename, $datestamp, 
               $type, $size,     $from,     
               $to,   $sub,      $score
);