my $crid = $crm->db->selectrow_array("SELECT idPerson FROM Person WHER
+E email = ? OR altEmail = ?", undef, quotemeta $data{'email'}, quotem
+eta $data{'email'});
[download]

That looks just wrong. There should be absolutely no need to quote bind values in DBI. Adding any kind of extra quoting just makes things worse. DBI and the DBD take care of everything needed to pass bind parameters to the database.

Alexander