$filename = $dateadded."-" . join("-",@words) . ".html";
               
    $filename_base = $filename;
    $filename_base =~ s/\.html//g;

    # check to see if filename is being used
    $SQL = "SELECT * FROM $database_table WHERE filename = '$filename'
+";
    &Do_SQL;
[download]

http://bobby-tables.com/

In other words: Use placeholders! Always.

http://bobby-tables.com/perl explains how.

(And get rid of abusing global variables as parameters for functions, and calling functions with an '&' prefix. Both is considered bad style, and both may have unwanted side effects.)

Alexander