What's the data type of users.user_password in your database? Apparently DBD::prepare thinks it's not a char(n).

Here's another possibility. This line: % } elsif ($password1 != $password2) {should probably be: % } elsif ($password1 ne $password2) {The numeric comparison makes me suspicious. Could it be causing DBD::execute to conclude that it doesn't need to be wrapped in quotes?