Adding to dragonchild's excellent advice, a better way to insert values into a database table is to use bind vars. Instead of using do(), you first prepare() the statement (which uses question marks(?) instead of the values) and then you execute() it:

my $rv = $dbh->prepare("
                insert into table foo
                values (?,?,?,?,?,?,?,?,?,?)
");
$rv->execute(
   'NULL','ME','testing',$from,$url,
   $name,3,$category,$subject,$body,
);
[download]

Now you don't have to worry about quoting the values. Much more portable among different database vendors.

jeffa

L-LL-L--L-LL-L--L-LL-L--
-R--R-RR-R--R-RR-R--R-RR
F--F--F--F--F--F--F--F--
(the triplet paradiddle)