in reply to Mysql queries with ' and "

You should be using placeholders, see DBI.