#1: spaces in column names = bad mojo. You will get bit all over the place. Most DBs will not allow it, and I'm pretty sure it isn't ANSI-SQL.
#2: the column name block in the insert statement shouldn't have quotes around the column names. (Of course, here's an example of where spaces in column names gets wierd).
#3: you should be using placeholders, see DBI.
#4: I'm not sure where the $db->Sql call is coming from. What package are you using for db access? It doesn't look like DBI.

-pete
Entropy is not what is used to be.