Select Code to Download

my $sql = "INSERT INTO TableName(Date,FileName) VALUES('$Date',$file)"
+;

my $sql = 'INSERT INTO TableName(Date,FileName) VALUES(?,?)';

my $stmt = $settle_dbh->prepare($sql);

$stmt->execute($Date, $file); # no quoting needed